Search: CVE-2026-61308

CVE-2026-61308 is a vulnerability in the networking component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. It allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical data or complete access to all accessible data in these products. The vulnerability is difficult to exploit and affects specific versions of Oracle Java SE and GraalVM. The vulnerability also impacts Java deployments running sandboxed Java Web Start applications or applets that load untrusted code. The CVSS 3.1 base score is 6.8, indicating a medium severity with high confidentiality impact but no integrity or availability impact. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities and strongly recommends applying patches promptly.