Oracle Java SE

Search everything

Mentions · 7d5
Mentions · 30d5
All mentions5
First seenOct 20, 2026
Last mentioned2d ago

Timeline

5 articles · newest first

Oracle Java flaw CVE-2026-91403 allows unauthenticated remote attacks

The CVSS 9.1 JSSE issue concerns trust in compromised eMudhra intermediate certificates, not confirmed code execution.

GBHackersOct 23, 06:11 UTC · 2d agoVulnerability 2 sourcesCVE-2026-914032 · 1 read

Oracle alerts on unauthenticated Java JSSE flaw CVE-2026-91403

The CVSS 9.1 issue affects named Java SE and GraalVM builds and can be reached through JSSE APIs without credentials.

Hacker News · securityOct 21, 22:17 UTC · 3d agoVulnerability 2 sources HN 20 points · 3 commentsCVE-2026-914033 · 2 reads

Oracle October 2026 CPU lists flaws across dozens of products

The October 20 notice names JD Edwards, MySQL, Java SE, WebLogic, PeopleSoft and many other lines, without CVE details.

Canadian Centre for Cyber Securityupdated Oct 21, 22:17 UTC · 3d agofirst Oct 21, 18:28 UTC · 4d agoAdvisory 2 sources

Oracle October 2026 CPU issues 1,295 patches, including CVSS 9.8 flaws

Six hundred ninety patches are remotely exploitable without authentication, spanning database, middleware, Java and applications.

GBHackersOct 21, 09:18 UTC · 4d agoVulnerabilityCVE-2026-75803 CVE-2026-101521 CVE-2026-66010+53 · 2 reads

Oracle October 2026 CPU fixes 1209 CVEs in 1295 patches

112 updates are critical; Fusion Middleware has 206 patches, 134 remotely exploitable without authentication.

Tenable Blogupdated Oct 23, 17:59 UTC · 2d agofirst Oct 20, 21:58 UTC · 4d agoAdvisory 5 sources2 · 1 read

Related CVEs

by mentions

CVE-2026-914039.1
JSSE trust flaw in Oracle Java SE and GraalVM
published 3d agoOracle Java SE
CVE-2026-916639.9
Improper access control in Oracle Essbase 21.8.3.0.0
published 4d agoOracle Essbase
CVE-2026-916589.9
Improper access control enables takeover of Oracle Essbase
published 4d agoOracle Essbase
CVE-2026-916379.9
Low-privilege access-control flaw in Oracle Essbase 21.8.3.0.0
published 4d agoOracle Essbase
CVE-2026-916389.9
Improper access control in Oracle Essbase 21.8.3.0.0
published 4d agoOracle Essbase
CVE-2026-916659.8
Unauthenticated takeover of Oracle Essbase 21.8.3.0.0
published 4d agoOracle Essbase
CVE-2026-1015219.8
Missing authentication allows unauthenticated takeover of Oracle APEX
published 4d agoOracle APEX
CVE-2026-75803<1%9.1
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the…
published Aug 25, 2026openssl openssl
CVE-2026-66010<1%5.1
DOMPurify before 3.4.12 fails to execute afterSanitizeElements hook for custom elements allowed via CUSTOM_ELEMENT_HANDLING.tagNameCheck, allowing attributes…
published Jul 24, 2026cure53 dompurifyPoC

Appears with

Oraclevendor · 5
Oracle E-Business Suiteproduct · 3
Oracle Database Serverproduct · 3
Oracle GraalVM Enterprise Editionproduct · 2
Oracle MySQLproduct · 2
Oracle Fusion Middlewareproduct · 2
Tenableorganization · 1
JD Edwards EnterpriseOneproduct · 1
Canadian Centre for Cyber Securityorganization · 1
eMudhraorganization · 1
Oracle Autonomous Health Frameworkproduct · 1
Oracle APEXproduct · 1
Oracle GraalVMproduct · 1
Oracle Essbaseproduct · 1
MySQL Serverproduct · 1
Oracle GraalVM for JDKproduct · 1

Entities are extracted by the model from each article. First seen Oct 20, 2026, last mentioned 2d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.