Search: CVE-2026-87294

CVE-2026-87294 is a vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition affecting multiple specified versions. It allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized read and write access to some accessible data. The vulnerability can be exploited through APIs, including web services, and affects Java deployments running untrusted code relying on the Java sandbox. The CVSS 3.1 base score is 6.5, indicating a medium severity impact on confidentiality and integrity.