Search: CVE-2026-60589

CVE-2026-60589 is a low-severity vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. It allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized read access to certain accessible data. Exploitation requires supplying data to specific APIs without using untrusted Java Web Start applications or applets. The vulnerability affects specific versions of Oracle Java SE, GraalVM for JDK, and GraalVM Enterprise Edition.