CVE-2026-91403-eMudhra-Java-Scanner

CVE-2026-91403 — eMudhra / JSSE trust scanner Checkers for Oracle Security Alert CVE-2026-91403. The vulnerability CVE-2026-91403 is a remotely exploitable CVSS 3.1 base 9.1 , "Network / Low complexity / No privileges / No user interaction" issue in the JSSE component of Oracle Java SE, Oracle...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 17 vulnerabilities (USN-9014-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-9014-1 advisory. It was discovered that the Security component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibl...

Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition

Summary This bulletin for IBM SDK, Java Technology Edition covers all applicable Java SE CVEs published by Oracle as part of their October 2026 Critical Patch Update, plus Oracle's two October 2026 Emergency Releases and one additional vulnerability. For more information please refer to Oracle's...

Rocky Linux 9.6 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794481305)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794481305 advisory. - Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-per...

AlmaLinux 9.6 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-demo / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1794481305)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1794481305 advisory. - Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf,...

IBM Java 7.1 < 7.1.5.33 / 8.0 < 8.0.8.75 Multiple Vulnerabilities

The version of IBM Java installed on the remote host is 7.1 prior to 7.1.5.33 / 8.0 prior to 8.0.8.75. It is, therefore, affected by multiple vulnerabilities as referenced in the Oracle October 20 2026 CPU advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM...

openjdk: Enhance TLS Extensions (Oracle CPU 2026-10)

A flaw was found in the Java Secure Socket Extension JSSE component. An unauthenticated remote attacker could exploit this vulnerability over Transport Layer Security TLS by sending crafted data to affected application programming interfaces APIs. A successful attack allows the attacker to cause...

openjdk: Enhance TLS handshakes (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Java Secure Socket Extension JSSE component. An unauthenticated remote attacker with network access via Transport Layer Security TLS can exploit this vulnerability to cause a partial Denial of Service DoS. This issue can be triggered when an application or web servic...

openjdk: Enhance TLS certificate handling (Oracle CPU 2026-10)

A flaw was found in the Java Secure Socket Extension JSSE component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability over a Transport Layer Security TLS connection to perform unauthorized modification, insertion, or deletion of accessible data. Exploitation occurs...

openjdk: Enhance TLS Extensions (Oracle CPU 2026-10)

A flaw was found in the Java Secure Socket Extension JSSE component. An unauthenticated remote attacker could exploit this vulnerability over Transport Layer Security TLS by sending crafted data to affected application programming interfaces APIs. A successful attack allows the attacker to cause...

openjdk: Enhance TLS certificate handling (Oracle CPU 2026-10)

A flaw was found in the Java Secure Socket Extension JSSE component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability over a Transport Layer Security TLS connection to perform unauthorized modification, insertion, or deletion of accessible data. Exploitation occurs...

openjdk: Enhance TLS handshakes (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Java Secure Socket Extension JSSE component. An unauthenticated remote attacker with network access via Transport Layer Security TLS can exploit this vulnerability to cause a partial Denial of Service DoS. This issue can be triggered when an application or web servic...

Security Bulletin: eMudhra CA Certificate Compromise (CVE-2026-91403 and CVE-2026-114820)

Summary Private keys for eight eMudhra intermediate CA certificates have been compromised. IBM® SDK, Java™ Technology Edition ships a root certificate that chains to the compromised intermediate certificates, so the compromised intermediate certificates are trusted by default. Vulnerability Detai...

openjdk: Enhance TLS handshakes (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Java Secure Socket Extension JSSE component. An unauthenticated remote attacker with network access via Transport Layer Security TLS can exploit this vulnerability to cause a partial Denial of Service DoS. This issue can be triggered when an application or web servic...

openjdk: Enhance TLS certificate handling (Oracle CPU 2026-10)

A flaw was found in the Java Secure Socket Extension JSSE component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability over a Transport Layer Security TLS connection to perform unauthorized modification, insertion, or deletion of accessible data. Exploitation occurs...

openjdk: Enhance TLS Extensions (Oracle CPU 2026-10)

A flaw was found in the Java Secure Socket Extension JSSE component. An unauthenticated remote attacker could exploit this vulnerability over Transport Layer Security TLS by sending crafted data to affected application programming interfaces APIs. A successful attack allows the attacker to cause...

openjdk: Enhance TLS handshakes (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Java Secure Socket Extension JSSE component. An unauthenticated remote attacker with network access via Transport Layer Security TLS can exploit this vulnerability to cause a partial Denial of Service DoS. This issue can be triggered when an application or web servic...

openjdk: Enhance TLS certificate handling (Oracle CPU 2026-10)

A flaw was found in the Java Secure Socket Extension JSSE component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability over a Transport Layer Security TLS connection to perform unauthorized modification, insertion, or deletion of accessible data. Exploitation occurs...

openjdk: Enhance TLS Extensions (Oracle CPU 2026-10)

A flaw was found in the Java Secure Socket Extension JSSE component. An unauthenticated remote attacker could exploit this vulnerability over Transport Layer Security TLS by sending crafted data to affected application programming interfaces APIs. A successful attack allows the attacker to cause...

openjdk: Enhance TLS handshakes (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Java Secure Socket Extension JSSE component. An unauthenticated remote attacker with network access via Transport Layer Security TLS can exploit this vulnerability to cause a partial Denial of Service DoS. This issue can be triggered when an application or web servic...