ALPINE-CVE-2026-91375

Vulnerability in Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit...

CVE-2026-87291

Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks ...

DEBIAN-CVE-2026-87291

Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks ...

DEBIAN-CVE-2026-87255

Vulnerability in Oracle Java SE component: Compiler. Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

CVE-2026-87255

Vulnerability in Oracle Java SE component: Compiler. Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this...

CVE-2026-101841

Vulnerability in the Global Order Promising product of Oracle E-Business Suite component: Web Service. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Global Order Promising. Whil...

CVE-2026-91590

A vulnerability exists in the Web Service API component of Oracle BI Publisher (part of Oracle Analytics). Affected versions include 8.2.0.0.0 and 26.01.0.0.0 . This easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise the product, provided they can ...

CVE-2026-91453

A vulnerability exists in the Lightweight HTTP Server component of Oracle Java SE , Oracle GraalVM for JDK , and Oracle GraalVM Enterprise Edition . Affected versions include Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, and 27; Oracle GraalVM for JDK 17.0.20.1 and ...

CVE-2026-91451

A vulnerability exists in the Networking component of Oracle Java SE . Affected versions include Oracle Java SE: 8u503 , 8u503-perf , 11.0.32.1 , 17.0.20.1 , 21.0.12.1 , and 25.0.4.1 , as well as specific versions of Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition . This easily explo...

CVE-2026-91451

Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable...

CVE-2026-91417

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: CORBA. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated...

CVE-2026-91395

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Utility. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM...

CVE-2026-87293

Vulnerability in Oracle Java SE component: RMI. Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromis...

CVE-2026-87291

A vulnerability exists in the Networking component of Oracle Java SE (affected versions: 21.0.12.1, 25.0.4.1, and 27). An unauthenticated attacker with network access via multiple protocols can exploit this flaw to gain unauthorized read access to a subset of accessible data. Exploitation occurs ...

CVE-2026-87255

A vulnerability exists in the Compiler component of Oracle Java SE versions 25.0.4.1 and 27 . An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability by supplying data to specific APIs—excluding Untrusted Java Web Start applications or applets (e.g., ...

CVE-2026-101841

A vulnerability exists in the Global Order Promising product of Oracle E-Business Suite , specifically within the Web Service component. Affected supported versions include 12.2.3 through 12.2.15 . This difficult-to-exploit vulnerability allows a low-privileged attacker with network access via HT...

PT-2026-119607

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 25.0.4.1 through 25.0.4.1 Oracle Java SE version 27 Description An issue in the Compiler component allows an unauthenticated attacker with network access via multiple protocols to compromise the system. This can result ...

Azul Zulu: CVE-2026-91451: Vulnerability in Azul Zulu

Vulnerability in Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable...

Oracle Global Order Promising security vulnerability

A security vulnerability exists in Oracle Global Order Promising versions 12.2.3 through 12.2.15. This vulnerability stems from issues within the Web Service component, potentially allowing low-privilege attackers to create, delete, or modify critical data or all accessible data via HTTP access, ...

Oracle E-Business Suite: CVE-2026-101841: Critical Patch Update

Vulnerability in the Global Order Promising product of Oracle E-Business Suite component: Web Service. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Global Order Promising. Whil...