CVE-2026-91453 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition Lightweight HTTP Server improper authorization

October 21, 2026 Yanac

A vulnerability was found in Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition. It has been declared as problematic. Impacted is an unknown function of the component Lightweight HTTP Server. Such manipulation leads to improper authorization.

This vulnerability is referenced as CVE-2026-91453. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More