Search: CVE-2026-19611

CVE-2026-19611 is a vulnerability in WildFly Elytron used in the Red Hat Build of Apache Camel 3.33.3.SP2. It involves improper handling of password input normalization using Unicode NFKC, which can reduce the complexity of passwords containing fullwidth characters by collapsing them to ASCII equivalents. This flaw allows remote attackers to more easily guess passwords using ASCII-only dictionaries, potentially leading to unauthorized access. A security update addressing this issue is included in Red Hat build of Quarkus 3.27.5.SP2.