Threats tagged 'ghsa-hxhg-8c3v-9288'

A vulnerability (CVE-2026-83408) exists in Oracle GraalVM for JDK's compiler component affecting specific versions of Oracle GraalVM for JDK 17, 21, and 25. This vulnerability allows an unauthenticated attacker with network access via HTTP to potentially take over the affected Oracle GraalVM instances. The CVSS 3.1 base score is 8.1, indicating high confidentiality, integrity, and availability impacts. Oracle has released security patches as part of its Critical Security Patch Update (CSPU) for September 2026 to address this and other vulnerabilities. Users are strongly advised to apply these patches promptly to mitigate the risk.