Vulnerability in Oracle Java SE and GraalVM Products

CVE-2026-91382

What is CVE-2026-91382?

This vulnerability affects Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, allowing unauthenticated attackers with network access to exploit it via multiple protocols. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, and potentially result in a partial denial of service. This is particularly concerning for applications that load untrusted code in sandboxed environments, as they rely on the Java security model to safeguard against such threats. Attackers may exploit APIs provided by the affected components to compromise systems.

References