Threats Tagged 'cve-2026-91374'
View all threats tagged with 'cve-2026-91374'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-91374'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-91374 is a vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition affecting the Serviceability component. It allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized update, insert, or delete access to some accessible data, as well as unauthorized read access to a subset of accessible data. The vulnerability is difficult to exploit and impacts confidentiality and integrity but not availability. It can be exploited through APIs, including web services supplying data to these APIs, and also affects Java deployments running sandboxed Java Web Start applications or applets that load untrusted code. The CVSS 3.1 base score is 4.8, indicating medium severity. A large Oracle Critical Patch Update released in October 2026 addresses this and many other vulnerabilities, and Oracle strongly recommends applying these patches promptly. Join the discussion | CVE Database V5 | 10/20/2026, 21:25:36 UTC Added: 10/20/2026, 21:38:07 UTC |
Showing 1 to 1 of 1 result