Critical Oracle Java Flaw With CVSS 9.1 Allows Unauthenticated Remote Attacks

Oracle issued a security alert for CVE-2026-91403, a critical vulnerability affecting Oracle Java SE and GraalVM. Attackers can exploit this vulnerability remotely without authentication. The advisory, published on October 21, 2026, assigns the flaw a CVSS 3.1 score of 9.1 and advises distrusting impacted intermediate certificate authority certificates associated with eMudhra. The vulnerability specifically impacts […]

This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform