Oracle Issues Security Alert for High-Severity Java SE Vulnerability
Oracle has issued a security alert for a critical vulnerability, CVE-2026-91403, in Java SE with a CVSS score of 9.1. Located in the JSSE component, this flaw can be exploited remotely and without authentication, affecting multiple versions. A fix has been released, and users are urged to upgrade as soon as possible.
Oracle Issues Security Alert for High-Severity Vulnerability in Java SE
Oracle recently issued a security alert regarding a critical vulnerability, identified as CVE-2026-91403, in its Java SE products. The vulnerability has a CVSS score of 9.1. Located within the JSSE component, it can be exploited remotely over the network without authentication, potentially causing severe damage to data confidentiality and integrity. Affected versions include Java SE 8u511, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1, as well as multiple versions of GraalVM. Oracle has released patches to address the issue and is urging users to upgrade to a supported version as soon as possible to mitigate potential cyberattack risks.
https://www.oracle.com/security-alerts/alert-cve-2026-91403.html