Search: CVE-2026-101516

CVE-2026-101516 is a vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition libraries. It allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized read and write access to certain accessible data. The vulnerability affects specific versions of Oracle Java SE, GraalVM for JDK, and GraalVM Enterprise Edition. Exploitation can occur through APIs, including web services supplying data to these APIs, and also affects sandboxed Java Web Start applications or applets that run untrusted code relying on the Java sandbox for security. The CVSS 3.1 base score is 6.5, indicating a medium severity vulnerability. Oracle has released patches as part of their October 2026 Critical Patch Update and strongly recommends applying them promptly.