Threats tagged 'ghsa-wpx5-pphw-xwr9'

A high-severity vulnerability (CVE-2026-87288) exists in the Oracle GraalVM component of Oracle Java SE, specifically in the Compiler. The vulnerability affects Oracle GraalVM version 25.0.4.1 and allows an unauthenticated attacker with network access via HTTP to potentially take over the Oracle GraalVM instance. The vulnerability has a CVSS 3.1 base score of 8.1, indicating high impact on confidentiality, integrity, and availability. The vulnerability is difficult to exploit and no known exploits are reported in the wild. Oracle has merged the advisory into a general CVE listing and no explicit patch or remediation details are provided in the vendor advisory.