Search: CVE-2026-22007

CVE-2026-22007 is a low-severity vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition affecting multiple versions including 8u481, 11.0.30, 17.0.18, and others. It allows an unauthenticated attacker with local logon access to the infrastructure where these products run to gain unauthorized read access to some accessible data. The vulnerability involves the Security component and can be exploited via APIs, including through web services or sandboxed Java applications that run untrusted code. The CVSS 3.1 base score is 2.9, indicating a low impact on confidentiality with no impact on integrity or availability.