Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

Vulnerability IntelligenceRHSA-2026:19098

RHSA-2026:19098

HIGH7.5

Red Hat Security Advisory: Red Hat build of Quarkus 3.27.3.SP2 security update

Published May 20, 2026

Modified Yesterday

Details

Details:

This release of Red Hat build of Quarkus 3.27.3.SP2 includes the following CVE fix:

pgjdbc: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication [quarkus-3.27] (CVE-2026-42198)

For more information, see the release notes page listed in the References section.

References

ADVISORY

https://access.redhat.com/errata/RHSA-2026:19098

WEB

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=redhat.quarkus&downloadType=distributions&version=3.27.3.SP2

WEB

https://access.redhat.com/products/quarkus/

WEB

https://access.redhat.com/security/updates/classification/#important

WEB

https://docs.redhat.com/en/documentation/red_hat_build_of_quarkus/3.27

WEB

https://issues.redhat.com/browse/QUARKUS-7768

ADVISORY

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19098.json

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Upstream

CVE-2026-42198

Ecosystems

Timeline

PublishedMay 20, 2026

ModifiedJun 10, 2026

RHSA-2026:19098 | Mondoo Vulnerability Intelligence