Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Red Hat Enterprise Linux 10 2026-08-19T00:00:00Z RHSA-2026:55787 java-21-openjdk-1:21.0.12.1.1-1.2.el10 Red Hat Enterprise Linux 10 2026-08-19T00:00:00Z RHSA-2026:55798 java-25-openjdk-1:25.0.4.1.1-1.1.el10 Red Hat Enterprise Linux 10.0 Extended Update Support 2026-08-19T00:00:00Z RHSA-2026:55787 java-21-openjdk-1:21.0.12.1.1-1.1.el10 Red Hat Enterprise Linux 7 Extended Lifecycle Support 2026-08-19T00:00:00Z RHSA-2026:55774 java-1.8.0-openjdk-1:1.8.0.504.b01-1.1.el7_9 Red Hat Enterprise Linux 8 2026-08-20T00:00:00Z RHSA-2026:55775 java-1.8.0-openjdk-1:1.8.0.504.b01-1.1.el8 Red Hat Enterprise Linux 8 2026-08-19T00:00:00Z RHSA-2026:55781 java-17-openjdk-1:17.0.20.1.1-1.1.el8 Red Hat Enterprise Linux 8 2026-08-19T00:00:00Z RHSA-2026:55787 java-21-openjdk-1:21.0.12.1.1-1.1.el8 Red Hat Enterprise Linux 8 2026-09-23T00:00:00Z RHSA-2026:70630 java-1.8.0-ibm-1:1.8.0.8.71-1.el8_10 Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 2026-08-20T00:00:00Z RHSA-2026:55775 java-1.8.0-openjdk-1:1.8.0.504.b01-1.1.el8 Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 2026-08-19T00:00:00Z RHSA-2026:55781 java-17-openjdk-1:17.0.20.1.1-1.1.el8 Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 2026-08-20T00:00:00Z RHSA-2026:55775 java-1.8.0-openjdk-1:1.8.0.504.b01-1.1.el8 Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 2026-08-19T00:00:00Z RHSA-2026:55781 java-17-openjdk-1:17.0.20.1.1-1.1.el8 Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 2026-08-20T00:00:00Z RHSA-2026:55775 java-1.8.0-openjdk-1:1.8.0.504.b01-1.1.el8 Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 2026-08-19T00:00:00Z RHSA-2026:55781 java-17-openjdk-1:17.0.20.1.1-1.1.el8 Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On 2026-08-20T00:00:00Z RHSA-2026:55775 java-1.8.0-openjdk-1:1.8.0.504.b01-1.1.el8 Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On 2026-08-19T00:00:00Z RHSA-2026:55781 java-17-openjdk-1:17.0.20.1.1-1.1.el8 Red Hat Enterprise Linux 8.8 Telecommunications Update Service 2026-08-20T00:00:00Z RHSA-2026:55775 java-1.8.0-openjdk-1:1.8.0.504.b01-1.1.el8 Red Hat Enterprise Linux 8.8 Telecommunications Update Service 2026-08-19T00:00:00Z RHSA-2026:55781 java-17-openjdk-1:17.0.20.1.1-1.1.el8 Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 2026-08-20T00:00:00Z RHSA-2026:55775 java-1.8.0-openjdk-1:1.8.0.504.b01-1.1.el8 Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 2026-08-19T00:00:00Z RHSA-2026:55781 java-17-openjdk-1:17.0.20.1.1-1.1.el8 Red Hat Enterprise Linux 9 2026-08-20T00:00:00Z RHSA-2026:55775 java-1.8.0-openjdk-1:1.8.0.504.b01-1.2.el9 Red Hat Enterprise Linux 9 2026-08-19T00:00:00Z RHSA-2026:55781 java-17-openjdk-1:17.0.20.1.1-1.2.el9 Red Hat Enterprise Linux 9 2026-08-19T00:00:00Z RHSA-2026:55787 java-21-openjdk-1:21.0.12.1.1-1.2.el9 Red Hat Enterprise Linux 9 2026-08-19T00:00:00Z RHSA-2026:55798 java-25-openjdk-1:25.0.4.1.1-1.1.el9 Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 2026-08-20T00:00:00Z RHSA-2026:55775 java-1.8.0-openjdk-1:1.8.0.504.b01-1.1.el9 Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 2026-08-19T00:00:00Z RHSA-2026:55781 java-17-openjdk-1:17.0.20.1.1-1.1.el9 Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 2026-08-20T00:00:00Z RHSA-2026:55775 java-1.8.0-openjdk-1:1.8.0.504.b01-1.1.el9 Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 2026-08-19T00:00:00Z RHSA-2026:55781 java-17-openjdk-1:17.0.20.1.1-1.1.el9 Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions 2026-08-19T00:00:00Z RHSA-2026:55787 java-21-openjdk-1:21.0.12.1.1-1.1.el9 Red Hat Enterprise Linux 9.6 Extended Update Support 2026-08-20T00:00:00Z RHSA-2026:55775 java-1.8.0-openjdk-1:1.8.0.504.b01-1.1.el9 Red Hat Enterprise Linux 9.6 Extended Update Support 2026-08-19T00:00:00Z RHSA-2026:55781 java-17-openjdk-1:17.0.20.1.1-1.1.el9 Red Hat Enterprise Linux 9.6 Extended Update Support 2026-08-19T00:00:00Z RHSA-2026:55787 java-21-openjdk-1:21.0.12.1.1-1.1.el9 Red Hat OpenJDK 11 els for RHEL 7 2026-08-19T00:00:00Z RHSA-2026:55778 java-11-openjdk-1:11.0.32.1.1-1.el7_9 Red Hat OpenJDK 11 els for RHEL 8 2026-08-19T00:00:00Z RHSA-2026:55778 java-11-openjdk-1:11.0.32.1.1-1.el8 Red Hat OpenJDK 11 els for RHEL 9 2026-08-19T00:00:00Z RHSA-2026:55778 java-11-openjdk-1:11.0.32.1.1-1.el9 Red Hat Hardened Images 2026-08-19T00:00:00Z RHSA-2026:57175 java-21-openjdk-portable-main-21.0.12.1.1-0.1.hum1 Red Hat Hardened Images 2026-08-19T00:00:00Z RHSA-2026:57177 java-25-openjdk-portable-main-25.0.4.1.1-0.1.hum1 Red Hat Hardened Images 2026-08-20T00:00:00Z RHSA-2026:57765 java-25-openjdk-main-25.0.4.1.1-1.1.hum1 Red Hat Hardened Images 2026-08-21T00:00:00Z RHSA-2026:58266 java-21-openjdk-main-21.0.12.1.1-1.0.hum1 Exploit Intelligence Out of support scope exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 Red Hat Enterprise Linux 10 Affected java-21-ibm-semeru-certified-jdk Red Hat Enterprise Linux 6 Out of support scope java-1.6.0-openjdk Red Hat Enterprise Linux 6 Out of support scope java-1.7.0-openjdk Red Hat Enterprise Linux 6 Out of support scope java-1.8.0-openjdk Red Hat Enterprise Linux 7 Out of support scope java-1.6.0-openjdk Red Hat Enterprise Linux 7 Out of support scope java-1.7.0-openjdk https://www.cve.org/CVERecord?id=CVE-2026-60589 https://nvd.nist.gov/vuln/detail/CVE-2026-60589