Vulnerability in Java SE Libraries Affecting Oracle Products

CVE-2026-22008

What is CVE-2026-22008?

A vulnerability in Oracle Java SE's libraries can be exploited by an unauthenticated attacker with network access via multiple protocols. This issue particularly affects Java deployments that utilize sandboxed Java Web Start applications or applets which load and execute untrusted code from the internet. Successful exploitation could allow attackers to perform unauthorized updates, inserts, or deletions of data accessible to Oracle Java SE. However, it is important to note that this vulnerability does not affect environments where Java only runs trusted code.

References