Search: CVE-2026-87292

CVE-2026-87292 is a low-severity vulnerability in Oracle Java SE and Oracle GraalVM products affecting multiple specified versions. It allows an unauthenticated attacker with network access to potentially perform unauthorized update, insert, or delete operations on accessible data via multiple protocols. The vulnerability involves the Networking component and can be exploited through APIs, including web services supplying data to these APIs. It also affects sandboxed Java Web Start applications or applets that run untrusted code relying on the Java sandbox for security. The CVSS 3.1 base score is 3.7, indicating low impact primarily on integrity without confidentiality or availability impact. Oracle has released a Critical Patch Update containing many security patches, including for this vulnerability, and strongly recommends applying patches promptly.