CVE-2026-62574General(oracle / graalvm)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • graalvm
  • graalvm_for_jdk
  • jdk
  • jre

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
Products
graalvmgraalvm_for_jdkjdkjre

7 versions affected across 4 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-22: 107-22
Signal classification1 categories
General
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-62574 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-62574

    Post summary

    The text merely lists the CVE identifier and a reference link, providing no substantive details about the vulnerability or its exploitation.

    00000103
    4.1K followersView on X
CPE platform detail15 entries

15 of 15 entries

PartVendorProductVersionTarget SWTarget HW
Apporaclegraalvm21.3.18--
Apporaclegraalvm_for_jdk17.0.19--
Apporaclegraalvm_for_jdk21.0.11--
Apporaclejdk1.8.0--
Apporaclejdk11.0.31--
Apporaclejdk17.0.19--
Apporaclejdk21.0.11--
Apporaclejdk25.0.3--
Apporaclejdk26.0.1--
Apporaclejre1.8.0--
Apporaclejre11.0.31--
Apporaclejre17.0.19--
Apporaclejre21.0.11--
Apporaclejre25.0.3--
Apporaclejre26.0.1--

Explore more