Oracle has released Security Alert CVE-2026-91403, affecting Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition. The vulnerability has a CVSS v3.1 Base Score of 9.1. Oracle customers should refer to the Security Alert Advisory for detailed guidance.
CVE-2026-91403: affected products and advisory
The Security Alert covers Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition. The alert is published at https://www.oracle.com/security-alerts/alert-cve-2026-91403.html. Oracle customers are directed to the Security Alert Advisory linked in that publication for further information.
