CVE-2026-21945 - Vulnerability Details

Threat entity extracted from intelligence sources

Frequency
20
occurrences
First Seen
January 20, 2026
Last Seen
February 5, 2026

CVE-2026-21945 is a vulnerability tracked across 4 threat clusters and 20 intelligence report mentions on ThreatCluster. First observed January 20, 2026; most recent activity February 5, 2026.

Related Threat Clusters

  • Multiple OpenJDK Versions Exposed to Remote Information Theft Vulnerabilities

    Vulnerabilities have been identified in OpenJDK versions 8, 11, and 21, as well as CRaC JDK 21. The RMI component in these versions allows unauthenticated remote attackers to establish TCP endpoint connections without…

    16 articles · Updated February 2, 2026
  • SUSE Releases Important Security Updates for Java OpenJDK

    SUSE has issued important security updates for both java-25-openjdk and java-11-openjdk, addressing multiple vulnerabilities. The updates include fixes for components such as RMI, AWT, JavaFX, Networking, and Security,…

    8 articles · Updated January 29, 2026
  • SUSE Java 1.8.0-OpenJ9 Security Update Addresses Multiple CVEs

    SUSE released an important security update for java-1_8_0-openj9, addressing four vulnerabilities in the Oracle Java SE components, including RMI, AWT, JavaFX, Networking, and Security. All identified CVEs were…

    2 articles · Updated February 5, 2026
  • SSRF Vulnerability in Java TLS Handshakes Causes DoS Risk

    Tenable Research has identified a server-side request forgery (SSRF) vulnerability in Java's handling of client certificates during TLS handshakes. This vulnerability can be exploited in certain configurations to create…

    1 article · Updated January 20, 2026

Recent Intelligence Reports

  • SUSE Java 1.8.0-OpenJ9 Important Security Update 2026-0389-1 CVE-2026 — Linuxsecurity · February 5, 2026
  • Ubuntu 25.10 OpenJDK 17 Critical Risk RCE DoS USN-7998 — Linuxsecurity · February 3, 2026
  • Ubuntu 25.10 OpenJDK 17 Important RMI Info Disclosure 7997-1 CVE-2026 — Linuxsecurity · February 3, 2026
  • Ubuntu 25.10 OpenJDK 25 Critical RCE Information Disclosure 7996 — Linuxsecurity · February 3, 2026
  • Ubuntu 25 OpenJDK 25 Important Security Threats USN-7995 — Linuxsecurity · February 3, 2026
  • Ubuntu 25.10 OpenJDK-21-crac Important Remote Access Threat USN-8003 — Linuxsecurity · February 3, 2026
  • Ubuntu 25.10 OpenJDK 21 Critical Code Exec Issue USN-8002 — Linuxsecurity · February 3, 2026
  • Ubuntu 25.10 OpenJDK 8 Critical Remote Code Exec Security Alert USN-8000 — Linuxsecurity · February 3, 2026

CVSS v3.1 Breakdown