CVE-2026-94449

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to provide strategies like retries and circuit breakers for microservices. The issue occurs when using the ApplyGuard or ApplyFaultTolerance annotations, where the library fails to release internal tracking objects after each request. This causes a steady increase in memory usage that eventually leads to the application slowing down and crashing due to lack of memory.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-400

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Referenced assets1 URL

By indicator

https://www.valtersit.com/cve/CVE-2026-94449

Full discourse1 post

Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters18h
CVE-2026-94449 SmallRye Fault Tolerance memory leak (CVSS 7.5): unpatched flaw in ApplyGuard/ApplyFaultTolerance annotations causes steady heap growth until Quarkus microservices slow and crash. No patch yet - track vendor https://www.valtersit.com/cve/CVE-2026-94449 #CVE #infosec #Quarkus #SmallRye #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
0000028
1.0K followersView on X

Explore more

Back to dashboard