CVE-2026-91403

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 22, 2026

Last Seen

October 22, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Oracle Java Vulnerability CVE-2026-91403 Disclosed78.0

A critical vulnerability, CVE-2026-91403, has been identified in Oracle Java SE and GraalVM products. Affected versions include Oracle Java SE 8u511, 11.0.33, 17.0.21, and others, as well as GraalVM for JDK 17.0.21 and 21.0.13. The flaw allows unauthenticated attackers with network access to exploit...

Critical Java Flaw Exposes eMudhra CA Certificates72.0

Oracle released an emergency fix for a critical vulnerability, CVE-2026-91403, affecting Java SE and GraalVM due to eight compromised eMudhra intermediate CA certificates. The flaw, rated critical with a CVSS score of 9.1, allows unauthenticated attackers to exploit the Java Secure Socket Extension...