VulnSocial

CVE-2026-94451

LOWCVSS 6.5 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users. This could allow an attacker to learn information they should not have access to or slow down the system by forcing the database to perform complex tasks, potentially causing a denial of service.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-19: 210-19
Referenced assets4 URLs
Full discourse2 posts
  • Ariel Carralbal@ArielCarralbal

    ⚠️ También en REST Data Panache, CVE-2026-94451 (Moderate, CVSS 6.5): con la paginación desactivada, el parámetro sort no se valida. Un atacante puede inferir información que no debería ver o cargar la base de datos hasta causar un DoS.

    1000018
    59 followersView on X
  • Ariel Carralbal@ArielCarralbal

    📚 Fuentes: Advisory RHSA-2026:83520: https://access.redhat.com/errata/RHSA-2026:83520 Resto de CVEs en el advisory CVE-2026-87744: https://access.redhat.com/security/cve/CVE-2026-87744 CVE-2026-94451: https://access.redhat.com/security/cve/CVE-2026-94451 CVE-2026-93432: https://access.redhat.com/security/cve/CVE-2026-93432

    0000017
    59 followersView on X

Explore more

Back to dashboard