Networking Vulnerability in Oracle Java SE and GraalVM

CVE-2026-91451

What is CVE-2026-91451?

This vulnerability in Oracle Java SE and GraalVM allows unauthenticated attackers with network access to leverage multiple protocols for exploitation. By interacting with the vulnerable APIs in the Networking component, attackers can gain unauthorized access to sensitive operations, including updates and deletions of accessible data. The attack does not require reliance on untrusted Java Web Start applications or untrusted Java applets but can be executed through standard web services. This vulnerability poses significant risks to the integrity of the affected systems.

References