CVE-2026-61308

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, and 26.0.2 Oracle GraalVM for JDK versions 17.0.20 and 21.0.12 Oracle GraalVM Enterprise Edition version 21.3.19

Description An issue exists in the Networking component that allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to unauthorized access to critical data or complete access to all accessible data. The issue can be exploited through APIs in the Networking component, such as via a web service providing data to these APIs. It also affects Java deployments that run untrusted code in sandboxed environments, such as Java Web Start applications or Java applets, which rely on the Java sandbox for security.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.