All vulnerabilities

Servers and applications

CVE-2026-87291

Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE…

Severity
Medium 5.3
Published
20 Oct 2026
Last changed
27 Oct 2026
Added to UpHeron
3 Nov 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
JavaServers and applications · cna:oracle corporation|oracle java se
  • Every version up to 21.0.12.1
  • From 25 up to 25.0.4.1
  • From 27 up to 27

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-87291