CVE-2026-94451
Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities.
Published Oct 12, 2026 · updated Oct 15, 2026 · Red Hat Exploit Intelligence
Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users. This could allow an attacker to learn information they should not have access to or slow down the system by forcing the database to perform complex tasks, potentially causing a denial of service.
Timeline
Detection, updates, and resolution for this record.
Oct 12, 2026 · NIST NVD
Detected
Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users. This could allow an attacker to learn information they should not have access to or slow down the system by forcing the database to perform complex tasks, potentially causing a denial of service.
Oct 15, 2026 · NIST NVD
Updated
Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users. This could allow an attacker to learn information they should not have access to or slow down the system by forcing the database to perform complex tasks, potentially causing a denial of service.
Affected
- vendor Red Hat Exploit Intelligenceversion unspecified
- vendor Red Hat Red Hat build of Quarkusversion unspecified
Sources
- CIRCL Vulnerability LookupCVE-2026-94451
Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users. This could allow an attacker to learn information they should not have access
vulnerability.circl.lu - CVE.orgCVE-2026-94451
Official CVE identifier
cve.org - NIST NVDCVE-2026-94451
Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort parameter provided by users. This could allow an attacker to learn information they should not have access
nvd.nist.gov