UpHeron
All vulnerabilities

Servers and applications

CVE-2026-91385

Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and 27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to…

Severity
Medium 5.4
Published
20 Oct 2026
Last changed
21 Oct 2026
Added to UpHeron
3 Nov 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
JavaServers and applications · cna:oracle corporation|oracle java se
  • Every version up to 8u503

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-91385