All vulnerabilities

Servers and applications

CVE-2026-114820

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and 21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily…

Severity
Critical 9.1
Published
24 Oct 2026
Last changed
24 Oct 2026
Added to UpHeron
24 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
JavaServers and applications · cna:oracle corporation|oracle graalvm for jdk
  • Every version up to 17.0.21.0.2
  • From 21 up to 21.0.13.0.2
JavaServers and applications · cna:oracle corporation|oracle java se
  • Every version up to 11.0.33.0.2
  • From 17 up to 17.0.21.0.2
  • From 21 up to 21.0.13.0.2
  • From 25 up to 25.0.5.0.2
  • From 27 up to 27.0.1.0.2

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-114820