Threats Tagged 'cve-2026-91380'
View all threats tagged with 'cve-2026-91380'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-91380'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-91380 is a vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition affecting specific versions. It allows an unauthenticated attacker with logon access to the infrastructure running these products to potentially compromise them. Successful exploitation can lead to unauthorized update, insert, or delete access to some accessible data, as well as unauthorized read access to a subset of that data. The vulnerability involves APIs in the Utility component and can be exploited via web services supplying data to these APIs or through sandboxed Java Web Start applications or applets running untrusted code. The CVSS 3.1 base score is 4.0, indicating a medium severity with confidentiality and integrity impacts. Oracle has published this vulnerability in its October 2026 Critical Patch Update advisory. Join the discussion | CVE Database V5 | 10/20/2026, 21:25:38 UTC Added: 10/20/2026, 21:38:09 UTC |
Showing 1 to 1 of 1 result