Search: CVE-2026-76763

CVE-2026-76763 is a denial of service vulnerability in SmallRye GraphQL within the Red Hat build of Quarkus 3.27.5.SP1. The flaw involves improper validation of large exponent float literals during number scalar coercion for BigInteger, allowing an unauthenticated remote attacker to cause CPU exhaustion or an OutOfMemoryError. This results in denial of service conditions. Red Hat has issued an important security advisory including this fix in the 3.27.5.SP1 release.