UpHeron
All vulnerabilities

Servers and applications

CVE-2026-91394

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle…

Severity
Medium 5.9
Published
20 Oct 2026
Last changed
23 Oct 2026
Added to UpHeron
3 Nov 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
JavaServers and applications · cna:oracle corporation|oracle graalvm for jdk
  • Every version up to 17.0.20.1
  • From 21 up to 21.0.12.1
JavaServers and applications · cna:oracle corporation|oracle java se
  • Every version up to 11.0.32.1
  • From 17 up to 17.0.20.1
  • From 21 up to 21.0.12.1
  • From 25 up to 25.0.4.1
  • From 27 up to 27

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-91394