NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#jsse

3 stories this week · 3 this month · 3 in 6 months · mostly security

Stories per day · 30 days

Relatedgraalvm3 java3 oracle3 certificate-revocation1 certificates1 certificate-trust1 emudhra1 tls1

2 stories, newest first · one card per story

Cyber Security News2d agohigh

Oracle emergency Java update distrusts weak eMudhra CAs (CVE-2026-91403)

The CVSS 9.1 JSSE flaw can let an on-path attacker forge trusted hostnames; no attacks are confirmed.

2 sources3 min readjava oracle

1

Hacker News · security3d agohigh

Oracle alerts on unauthenticated Java JSSE flaw CVE-2026-91403

The CVSS 9.1 issue affects named Java SE and GraalVM builds and can be reached through JSSE APIs without credentials.

2 sources4 min readoracle java

3