Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.33.2.SP1 security update

🗓️ 17 Jun 2026 15:45:05Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 22 Views

Red Hat Quarkus 3.33.2.SP1 security update fixes CVEs including authentication bypass and denial of service.

Reporter	Title	Published	Views	Family All 1342
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView	2 Jul 202616:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is affected by an HTTP Request/Response Smuggling Vulnerability in Netty (CVE-2026-50020)	21 Jul 202621:37	–	ibm
IBM Security Bulletins	Security Bulletin:Multiple security vulnerabilities in IBM Process Automation Manager Open Edition Starter Kit for Banking	17 Jul 202620:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-handler-4.1.133.Final.jar	30 Jun 202611:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by Multiple Vulnerabilities.	23 Jul 202606:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is vulnerable to Improper Verification of Cryptographic Signature.	22 Jul 202607:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Enterprise Build of Quarkus is affected by an authentication/authentization bypass vulnerability	23 Jun 202612:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect Data Virtualization on IBM Software Hub (June 2026 - Part 1 of 2)	7 Jul 202607:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to multiple Netty vulnerabilities (CVE-2026-45673, CVE-2026-45674, CVE-2026-47691)	21 Jul 202621:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in netty-handler-4.1.133.Final.jar	30 Jun 202611:12	–	ibm

Source	Link
access	www.access.redhat.com/jbossnetwork/restricted/listSoftware.html
access	www.access.redhat.com/products/quarkus/
access	www.access.redhat.com/security/updates/classification/
docs	www.docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.33
issues	www.issues.redhat.com/browse/QUARKUS-7955

26 Jul 2026 14:50Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.18.7 - 10

CVSS 48.7

EPSS0.0063

SSVC

authentication bypass denial of service ipv6 subnet bypass malformed haproxy message proxy protocol leak dns record validation hostname verification bypass http2 resource leak cname record validation information disclosure