CERT24CVE-2026-87294: Unauthorized access vulnerability in Oracle Java SE and GraalVMLoading data…
CERT24Threat Observatory
Period

CVE-2026-87294: Unauthorized access vulnerability in Oracle Java SE and GraalVM

An easily exploitable vulnerability affecting Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition allows an unauthenticated network attacker to obtain unauthorized read access and update, insert, or delete access to data through APIs. The CVSS 3.1 base score is 6.5.

← Back to intelligence

CVE-2026-87294: Unauthorized access vulnerability in Oracle Java SE and GraalVM

An easily exploitable vulnerability affecting Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition allows an unauthenticated network attacker to obtain unauthorized read access and update, insert, or delete access to data through APIs. The CVSS 3.1 base score is 6.5.