Vulnerability in Oracle GraalVM Products Impacting Data Security
CVE-2026-83368

7HIGH

Key Information:

Vendor

Oracle
Status
Oracle Graalvm For Jdk, Oracle Graalvm Enterprise Edition, Oracle Graalvm
Vendor
CVE Published:
15 September 2026

What is CVE-2026-83368?

A vulnerability exists in Oracle GraalVM and its enterprise editions that can be exploited by unauthenticated attackers with network access through HTTP. Successful exploitation may lead to unauthorized access to sensitive data, manipulation of database entries, and potential service disruptions such as partial denial of service. The affected versions include specific distributions of Oracle GraalVM for JDK and the Enterprise Edition, emphasizing the need for immediate security assessments and mitigations.

Affected Version(s)

Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM Oracle GraalVM for JDK 17:23.0.13.1

Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM Oracle GraalVM for JDK 21:23.1.12.1

Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, Oracle GraalVM Oracle GraalVM Enterprise Edition:21.3.19.1

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.