UpHeron
All vulnerabilities

Servers and applications

CVE-2026-91373

Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.…

Severity
Medium 5.3
Published
20 Oct 2026
Last changed
22 Oct 2026
Added to UpHeron
3 Nov 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
JavaServers and applications · cna:oracle corporation|oracle java se
  • Every version up to 8u503
  • From 11 up to 11.0.32.1
  • From 17 up to 17.0.20.1
  • From 21 up to 21.0.12.1
  • From 25 up to 25.0.4.1

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-91373