A medium severity vulnerability (CVE-2026-87293) exists in Oracle Java SE's RMI component affecting multiple OpenJDK 8 versions. The flaw allows remote attackers to cause partial confidentiality and integrity loss without authentication. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a network attack vector with high attack complexity and no privileges required. No public exploits or known active exploitation have been reported. Affected versions include specific OpenJDK 8 update builds primarily found in Ubuntu distributions.
CVE-2026-87292 is a low-severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The vulnerability does not impact confidentiality or availability but may allow limited integrity compromise. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.
A medium severity vulnerability (CVE-2026-87291) exists in the Networking component of Oracle Java SE, specifically affecting OpenJDK 8 versions listed. The flaw allows an attacker to obtain limited information (confidentiality impact) without requiring privileges or user interaction. No integrity or availability impacts are noted.
CVE-2026-87290 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions distributed with Ubuntu 16.04 through 26.04 LTS. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 5.9, indicating a network attack vector with high complexity and no privileges required, resulting in high confidentiality impact but no integrity or availability impact. No public exploits or known active exploitation have been reported.
CVE-2026-113730 is a medium severity vulnerability in the OGNL (Object Graph Navigation Library) for Java affecting specific versions 2.7.3-5 through 2.7.3-9. The vulnerability has a CVSS score of 5.6, indicating a network attack vector with high attack complexity and no privileges or user interaction required, impacting confidentiality, integrity, and availability to a low extent. No public exploit or known active exploitation is reported. The affected versions are explicitly identified, but no patch or remediation details are provided in the available data.
CVE-2026-83395 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 6.5, indicating a network exploitable flaw with low attack complexity, no privileges required, and no user interaction. The impact includes no confidentiality loss but includes integrity and availability impacts.
CVE-2026-83387 is a medium severity vulnerability affecting specific versions of OpenJDK 8, including various Ubuntu package builds. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 5.9, indicating a network attack vector with high complexity and no privileges required, resulting in high confidentiality impact but no integrity or availability impact.
CVE-2026-83374 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including various Ubuntu package versions. The vulnerability impacts Oracle Java SE and Oracle GraalVM for JDK. It has a CVSS 3.1 base score of 5.9, indicating a network attack vector with high attack complexity and no privileges or user interaction required. The impact is limited to integrity, with no confidentiality or availability impact reported.
DBI versions before 1.656 for Perl have a flaw where a failed open of a DBD::DBM table does not release the table's lock, causing subsequent opens to hang indefinitely. This occurs because the lock file is created and exclusively locked before certain failure checks, and if those checks fail, the lock is never released. The lock persists as long as the handle holding it remains alive, blocking other attempts to open the table.
CVE-2026-101803 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the Server XML component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. The vulnerability is classified as medium severity. Oracle has included this issue in its October 2026 Critical Patch Update, which contains numerous security patches across many products. No public exploit code or in-the-wild exploitation has been reported. Oracle strongly recommends applying the available patches promptly to mitigate the risk.
CVE-2026-101802 is a vulnerability affecting MySQL Server and MySQL Cluster, specifically in the server parser component. It impacts multiple versions including MySQL 8.0, 8.4, and 9.7, as well as various Ubuntu 5.5 builds. The vulnerability was published on October 26, 2026, and is rated with medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across many products. Oracle strongly recommends applying available patches promptly to mitigate risks associated with this and other vulnerabilities.
CVE-2026-101801 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple versions of MySQL including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across many Oracle products. Oracle strongly recommends applying the available security patches promptly to mitigate this and other vulnerabilities.
CVE-2026-101800 is a security vulnerability affecting MySQL Server and MySQL Cluster related to security privileges. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific MySQL 5.5 builds on Ubuntu. The vulnerability was publicly disclosed in October 2026 and is categorized as medium severity. Oracle has released a Critical Patch Update in October 2026 addressing this and many other vulnerabilities. There are no known exploits in the wild for this vulnerability at this time.
CVE-2026-101799 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically the Group Replication GCS component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7. The vulnerability was published on October 26, 2026, and is rated with medium severity. Oracle has released a Critical Patch Update in October 2026 that includes fixes for this and many other vulnerabilities across various Oracle products, including MySQL. Users are strongly advised to apply the available patches promptly to mitigate the risk.
CVE-2026-101798 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically in the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu 14.04-specific MySQL 5.5 builds. The vulnerability was published on October 26, 2026, and is classified as medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous patches for multiple products. Oracle strongly recommends applying available patches promptly to mitigate risks associated with this and other vulnerabilities.
CVE-2026-101797 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, including the mysqldump client. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific Ubuntu 5.5 builds. Oracle has released a Critical Patch Update in October 2026 addressing this and many other vulnerabilities. Users are strongly advised to apply the official patches promptly to mitigate risk.
CVE-2026-101796 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically in the replication component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific Ubuntu 14.04 LTS MySQL 5.5 builds. Oracle has released a Critical Patch Update in October 2026 addressing this and many other vulnerabilities. No public exploit code or in-the-wild exploitation has been reported. Oracle strongly recommends applying the available patches promptly to mitigate this vulnerability.
CVE-2026-101795 is a security vulnerability affecting MySQL Server and MySQL Cluster components, including versions 8.0, 8.4, and 9.7. The vulnerability is publicly known and classified with medium severity. It is included in Oracle's October 2026 Critical Patch Update, which addresses numerous security issues across multiple Oracle products. No public exploit code or in-the-wild exploitation has been reported for this vulnerability. Oracle strongly recommends applying the provided security patches promptly to mitigate potential risks.
CVE-2026-101794 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the Server XML component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7. The vulnerability is classified with medium severity. Oracle has included this issue in its October 2026 Critical Patch Update, which addresses numerous security flaws across various Oracle products. The advisory strongly recommends applying available patches promptly to mitigate risks associated with this vulnerability.
CVE-2026-101789 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. The vulnerability was publicly disclosed in October 2026 and is classified as medium severity. Oracle has released a Critical Patch Update in October 2026 that addresses this and many other vulnerabilities across its product portfolio. Users are strongly advised to apply the available patches promptly to mitigate the risk.