Search: CVE-2026-91403

CVE-2026-91403 is a critical vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition affecting the JSSE component. It allows an unauthenticated attacker with network access to exploit multiple protocols to gain unauthorized creation, deletion, or modification access to critical data or complete access to all accessible data. The vulnerability can be exploited via APIs, including through web services and sandboxed Java applications that run untrusted code. The CVSS 3.1 base score is 9.1, indicating high confidentiality and integrity impact without requiring user interaction or privileges.