Java 9.1 分高危漏洞背后：8 组私钥秒破，约 3 万张证书待迁移！eMudhra 股价暴跌，退出全球 TLS 业务！

2026 年 10 月 21 日，甲骨文针对 Java 发布紧急安全公告，修复编号为 CVE-2026-91403 的高危漏洞。该漏洞涉及 Java 安全套接字扩展（JSSE）组件，CVSS 3.1 评分达到 9.1 分。 根据甲骨文的风险评估，漏洞可能在无需身份验证、无需用户交互的情况下被远程利用，危及数据的机密性和完整性。 受影响产品包括 Oracle Java SE、Oracle Graal ...

[Alert 3] Vulnerability found in Java. Will apps stop? Will information leak? A detailed explanation of the current issue

On October 21, 2026, the IPA (Information-technology Promotion Agency) issued an alert regarding a vulnerability in Oracle ...

[Following PHP, now Java] 55 vulnerabilities announced, 49 of which are 'remotely exploitable without authentication.' IPA issues emergency alert: What corporate syst…

Hello, this is Nagasareta Kappa.Following yesterday's emergency announcement of the critical PHP vulnerability 'php2shell ...
SecurityWeek

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

Oracle’s October 2026 CPU brings 1,295 security patches for 1,209 CVEs, including 95 critical flaws, across dozens of products.
cyberkendra.com

CVE-2026-91403: Oracle Java Emergency Fix for eMudhra CAs

Oracle’s CVE-2026-91403 alert stops Java SE and GraalVM trusting eight compromised eMudhra intermediate CA certificates.