Search
Oracle Corporation recently disclosed a critical security vulnerability, identified as CVE-2026-91403. This vulnerability exists in the Java Secure Socket Extension component, with a CVSS 3.1 score as high as 9.1. Attackers can launch an attack simply by invoking the relevant component APIs without requiring authentication, privileges, or user interaction. Once exploited, the vulnerability can severely impact the confidentiality and integrity of the system, though it does not affect system availability. Additionally, Java programs in specific client environments may also be affected. This vulnerability affects multiple versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition software. Oracle has officially provided patches for the affected products and recommends that users upgrade promptly to mitigate risks.
-
C114 Communication Network -
Communication Home
