Vulnerability in Oracle Java SE, JavaFX, and GraalVM Enterprise Edition

CVE-2026-91385

What is CVE-2026-91385?

A vulnerability exists in Oracle Java SE, JavaFX, and GraalVM Enterprise Edition that allows unauthenticated attackers with network access to compromise systems via multiple protocols. This flaw requires human interaction from a user other than the attacker to exploit successfully. It may lead to unauthorized actions such as data modification or unauthorized access to sensitive information. This issue primarily impacts environments using sandboxed Java applications that run untrusted code, exposing them to potential risks, while deployments running only trusted code remain unaffected. Detailed mitigation recommendations can be found in the Oracle Advisory.

References