VulnSocial

CVE-2026-114820

LOWCVSS 9.1 · CRITICAL

Signal is active with 5 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and 21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-327

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 14 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Peaked 1d ago at 9 mentions (2026-10-24); latest day: 5
  • 14 total mentions across 2 days

Deep dive

Activity timeline14 mentions / 2d
02579Mentions · 2026-10-24: 9Mentions · 2026-10-25: 510-2410-25
Referenced assets7 URLs
Full discourse14 posts
  • Dark Web Intelligence@DailyDarkWeb

    ⚠️ UPDATE: ORACLE PULLS eMUDHRA AND COMODO AAA ROOTS FROM JAVA IN NEW SECURITY ALERT (CVE-2026-114820) Oracle issued a second eMudhra-related Security Alert on Oct 24, 2026. Its Oct 21 alert (CVE-2026-91403) distrusted the compromised intermediate CA certificates. The new update removes the root certificates themselves from the JDK cacerts keystore. * Removed: emSign ECC Root CA - G3, emSign Root CA - G1, emSign Root CA - G2 and Comodo's AAA Certificate Services (owned by Sectigo) * CVE-2026-114820, CVSS 3.1 9.1 (JSSE, network, no authentication) * Affected: Oracle Java SE 8u511-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; GraalVM for JDK 17/21; GraalVM EE 21.3.20.0.2 * Fixed: JDK 27.0.1.0.3, with matching .0.3 baselines for 25, 21, 17 and 11, and 8u511-b33 This is a cleanup step for the eMudhra incident DDW has covered since Oct 20, not a new breach, and no exploitation has been reported. Removing the Comodo root does not mean its key was compromised. If you only patched for the Oct 21 alert, update again, then test anything that still chains to these roots. Check other Java vendors' builds separately. https://www.oracle.com/security-alerts/alert-cve-2026-114820.html #CyberSecurity #Java #PKI

    1401554.0K
    211.4K followersView on X
  • alvaro842@alvaro842DEV

    Nueva vulnerabilidad confirmada por Oracle: CVE-2026-114820 Esta está relacionada con la vulnerabilidad de los certificados de eMudhra, todo Java de Oracle es vulnerable, y cualquier otra distribución como las de temurin probablemente también, así que se recomienda actualizar

    1002086
    42 followersView on X
  • Parameter Watch@ParameterWatch

    ⚠️ CVE-2026-114820 (9.1) ⚠️ Oracle Java SE and GraalVM let an unauthenticated attacker read and change app data. Java SE 8u511, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2, and GraalVM 17.0.21.0.2, 21.0.13.0.2, 21.3.20.0.2 are affected. https://t.co/QI38I3EAAJ

    10020181
    19 followersView on X
  • Takahiro YAMADA@yamadamn

    ちなみに、これに相当するものとして 10/24版の OpenJDK Vulnerability Advisory で CVE-2026-114820 に対応したことが示されています。 https://openjdk.org/groups/vulnerability/advisories/2026-10-24 けど、なぜ先のWindowsルート証明書を利用する方法で残っていたComodo CAAまで消したんだろうか。eMudhra以外でも使われていそうなのに…

    00010107
    2.3K followersView on X
  • Xavier Rivera@XavierRiveraX

    Oracle pushed an out-of-band Java Security Alert, CVE-2026-114820 (CVSS 9.1), and the fix is a trust-store change. Java SE and GraalVM drop the root CA certs tied to eMudhra. Anything your Java apps validate against those roots stops being trusted after the update. Check which internal services or vendor endpoints chain to emSign before you patch.

    0000191
    600 followersView on X
  • 高野久｜サイバーセキュリティ@DIVERTtokyo

    米OracleがJavaの緊急セキュリティ更新を公表、 デジタル証明書も信用できない時代？ 認証局の秘密鍵が侵害され、深刻度はCVSS 9.1 https://sbom-security.jp/news/oracle-java-cve-2026-114820 #Oracle #Java #脆弱性 #デジタル証明書 #サイバーセキュリティ

    0000077
    24 followersView on X
  • WebWright 🇺🇸@WebWrightAI

    🔐 Oracle Java alert, CVE-2026-114820, CVSS 9.1 JSSE still trusts an impacted eMudhra root CA, so a network attacker can forge certs. Remote, no auth, no user action. Affected: Java SE 8, 11, 17, 21, 25, 27 and GraalVM. Fix: update Java. https://www.oracle.com/security-alerts/alert-cve-2026-114820.html

    0000047
    26 followersView on X
  • はまつまる@hamatz

    また新しい脆弱性かと思ったら eMudhraの証明書関連のやつか。朝からビックリした https://www.oracle.com/security-alerts/alert-cve-2026-114820.html

    00000144
    1.5K followersView on X
  • The Hacker Wire@TheHackerWire

    🚨 CVE-2026-114820 (CVSS 9.1 Critical) Easily exploitable flaw in Oracle Java SE & GraalVM (JSSE) allows unauthenticated remote attackers to access, alter, or delete critical data. ⚡ Action: Apply Oracle CPU patches. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-114820/ https://t.co/KS1eOPxH0P

    0000067
    196 followersView on X
  • The Circuitry@thecircuitry_

    The Circuitry Daily Rundown: Oct 24 • Oracle Security Alert CVE-2026-114820 (CVSS 9.1) pulls eMudhra roots… • Flapping Airplanes Announces $1 Billion Series A at Reported $6… • Electric mobility roundup: Ionity targets petrol prices, SNCF… Verified, in https://thecircuitry.to/today?utm_source=rundown&utm_medium=video&utm_campaign=rundown-2026-10-24

    0000097
    43 followersView on X
  • The Circuitry@thecircuitry_

    Oracle's Security Alert for a critical 9.1 Java flaw pulls four eMudhra-linked root certificates from Java SE and GraalVM. Update Java or apply Oracle's mitigations. https://thecircuitry.to/article/oracle-security-alert-cve-2026-114820-cvss-91-pulls-emudhra-roots-from-java-se-a-mvmssu8k?utm_source=x&utm_medium=social&utm_campaign=article_tweet

    0000075
    43 followersView on X
  • catcowbug // automated intel@catcowbug

    oracles second emergency java fix for emudhra pulls 4 whole roots, incl the old comodo "AAA Certificate Services" root the bad intermediates were also cross-signed under update java, then check ur https calls still connect. the bad keys had a spare door https://www.oracle.com/security-alerts/alert-cve-2026-114820.html

    0000054
    43 followersView on X
  • Eliran Emuna@EmunaEliran

    🚨 Oracle Alert: CVE-2026-114820, CVSS 3.1 9.1 (Oracle), Java SE/GraalVM JSSE, no auth ⚠️ Java SE 8u511, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1 + GraalVM 🛡️ Not in KEV ✅ Update to latest Java 🔗 https://www.oracle.com/security-alerts/alert-cve-2026-114820.html #Java #Oracle #CVE https://t.co/3tgfYZrNdQ

    0000086
    66 followersView on X
  • Severity Daily@severitydaily

    Oracle (@Oracle) issued a second 9.1 Java alert over eMudhra, and its own page says updating Java does not remove the two roots — you delete them by hand with keytool. No exploitation reported. https://severitydaily.com/oracle-java-cve-2026-114820-9-1-emudhra-root-cas-cpu427-keytool-delete-comodoaaaca/

    0000057
    33 followersView on X

Explore more

Back to dashboard