CVE-2026-91403

Published 21 October 2026 · tracked since 22 October 2026

Description

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and 21.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-114724 HIGH 7.4
• CVE-2026-114715 MEDIUM 6.8
• CVE-2026-114658 HIGH 8.8
• CVE-2026-114636 HIGH 8.7
• CVE-2026-114638 HIGH 8.7
• CVE-2026-114640 HIGH 8.7
• CVE-2026-114577 HIGH 7.3
• CVE-2026-12664 MEDIUM 6.8
• CVE-2026-15723 HIGH 8.2
• CVE-2026-110264 CRITICAL 10

→ Open the live CVE board · all tools