Search: CVE-2026-22008

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.7	EPSS 0.2%	CVE-2026-22008 · Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Low3.7EPSS 0.2%2026-04-21CVE Database V5 CVE-2026-22008 is a low-severity vulnerability in Oracle Java SE version 25.0.1 affecting the Libraries component. It allows an unauthenticated attacker with network access via multiple protocols to potentially perform unauthorized update, insert, or delete operations on some data accessible by Oracle Java SE. This vulnerability primarily impacts Java deployments running sandboxed Java Web Start applications or sandboxed Java applets that execute untrusted code relying on the Java sandbox for security. It does not affect server-side Java deployments running only trusted code. The vulnerability has a CVSS 3.1 base score of 3.7, indicating low severity with integrity impact only. Oracle’s April 2026 Critical Patch Update advisory does not explicitly confirm a patch for this specific vulnerability, and no known exploits are reported in the wild. EPSS 0.2%Vulnerability CWE-250	CVE Database V5	2026-04-21

Page 1 of 1 · 1 duplicate CVE record merged