UpHeron
All vulnerabilities

Servers and applications

CVE-2026-91487

Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle…

Severity
Medium 4.8
Published
20 Oct 2026
Last changed
24 Oct 2026
Added to UpHeron
3 Nov 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
JavaServers and applications · cna:oracle corporation|oracle java se
  • Every version up to 11.0.32.1
  • From 17 up to 17.0.20.1
  • From 21 up to 21.0.12.1
  • From 25 up to 25.0.4.1
  • From 27 up to 27

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-91487