CYBERSECURITYTRACKER
Permanent story citation

NCSC-2026-0449 Multiple vulnerabilities fixed in Oracle Java

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11058

As cited

Copy frozen at (site build).

vulnerabilities

NCSC-2026-0449 Multiple vulnerabilities fixed in Oracle Java

Oracle released patches for multiple vulnerabilities affecting Oracle Java SE, JavaFX, and GraalVM Enterprise Edition. The flaws span multiple components including the compiler, networking, JAXP, JDBC, RMI, ImageIO, Lightweight HTTP Server, and CORBA, allowing unauthenticated network attackers to cause denial of service, read or write data without authorization, or crash systems when executing untrusted code in sandboxed environments.

Why it matters: Organizations running Oracle Java SE, JavaFX, or GraalVM Enterprise Edition must apply these patches promptly to prevent remote attacks via exposed APIs and sandboxed applications; the vulnerabilities enable both data access and availability impacts.

VendorsOracle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary