Oracle Java SE Critical Certificate Trust (CVE-2026-91403 Security Alert)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(371349);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/23");

  script_cve_id("CVE-2026-91403");

  script_name(english:"Oracle Java SE Critical Certificate Trust (CVE-2026-91403 Security Alert)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"The 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, or 27.0.1 versions of Java installed on the remote host are
affected by a vulnerability as referenced in the CVE-2026-91403 Oracle Security Alert advisory.

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle
    Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33,
    17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and 21.0.13; Oracle GraalVM Enterprise Edition:
    21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple
    protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful
    attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical
    data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as
    unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle
    GraalVM Enterprise Edition accessible data. (CVE-2026-91403)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  # https://www.oracle.com/docs/tech/security-alerts/cve-2026-91403csaf.json
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?cd9bfc7d");
  script_set_attribute(attribute:"see_also", value:"https://www.oracle.com/security-alerts/alert-cve-2026-91403.html");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Java SE 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, or 27.0.1.0.2 as appropriate per the
CVE-2026-91403 Oracle Security Alert advisory. For Java SE 8, apply the 8u511 b32 BPR available from My
Oracle Support.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:N");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-91403");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/10/21");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/10/21");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/23");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:jre");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:jdk");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("sun_java_jre_installed.nasl", "sun_java_jre_installed_unix.nasl");
  script_require_keys("installed_sw/Java");

  exit(0);
}

include('vcf_extras.inc');

var app_list = ['Oracle Java'];

var app_info = vcf::java::get_app_info(app:app_list);

var java8_display = 'Apply the Java SE 8u511 b32 BPR per the CVE-2026-91403 Oracle Security Alert advisory';

var constraints = [
  { 'min_version' : '8.0.0', 'max_version' : '8.0.511', 'fixed_display' : java8_display },
  { 'min_version' : '11.0.0', 'max_version' : '11.0.33', 'fixed_display' : 'Upgrade to version 11.0.33.0.2 or greater' },
  { 'min_version' : '17.0.0', 'max_version' : '17.0.21', 'fixed_display' : 'Upgrade to version 17.0.21.0.2 or greater' },
  { 'min_version' : '21.0.0', 'max_version' : '21.0.13', 'fixed_display' : 'Upgrade to version 21.0.13.0.2 or greater' },
  { 'min_version' : '25.0.0', 'max_version' : '25.0.5', 'fixed_display' : 'Upgrade to version 25.0.5.0.2 or greater' },
  { 'min_version' : '27.0.0', 'max_version' : '27.0.1', 'fixed_display' : 'Upgrade to version 27.0.1.0.2 or greater' }
];

vcf::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_HOLE);