CVE-2026-93568 is a vulnerability where HTTP/2 and HTTP/3 Extended CONNECT requests are improperly downgraded to regular CONNECT requests. This behavior can lead to an authorization bypass, as indicated by the high CVSS impact on integrity. The issue affects the Red Hat build of Quarkus and is addressed in the 3.33.3.SP2 release. A security update is available from Red Hat that fixes this and other vulnerabilities.