CVE-2026-87743

Name of the Vulnerable Software and Affected Versions Quarkus (affected versions not specified)

Description An issue exists in Quarkus HTTP security where a discrepancy in path normalization between the security matcher and HTTP request dispatchers can be exploited. An unauthenticated attacker can craft a URL that the security matcher identifies as public, but which is subsequently routed to a protected endpoint. This results in an authorization bypass, potentially allowing unauthorized access to sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.