Serviceability Vulnerability in Oracle Java SE and GraalVM Products

CVE-2026-91397

What is CVE-2026-91397?

A vulnerability in Oracle's Java SE and GraalVM products allows an unauthenticated attacker with access to the infrastructure to compromise the software. Successful exploitation, which necessitates human interaction from a third party, could permit unauthorized updates, inserts, or deletions of data, as well as potentially leading to a partial denial of service. This issue primarily arises from the use of APIs associated with the affected components, especially when running untrusted code in sandboxed environments, such as Java Web Start applications. It is crucial for users of the affected versions to review the advisory from Oracle and implement the recommended security measures.

References