CVE-2026-83400 Oracle Corporation CVE debrief

Who should care

Defenders responsible for Java SE, GraalVM for JDK, and GraalVM Enterprise Edition deployments should assess exposure and prioritize updates. This includes administrators of Java-based applications, especially those in client-side environments running sandboxed Java Web Start applications or applets.

Why it matters

CVE-2026-83400 is a vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition that allows unauthenticated attackers to cause a partial denial of service. Defenders should prioritize verifying exposure, especially in environments with untrusted code execution, and update affected versions.

• Potential partial denial of service (DOS) in Java SE, GraalVM for JDK, and GraalVM Enterprise Edition deployments.
• Need to verify exposure in environments with untrusted code execution.
• Requires assessment of network access and JAXP component usage.
• Prioritization of updates and patches for affected versions.

Technical summary

The vulnerability affects Oracle Java SE 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK 17.0.20.1 and 21.0.12.1; and Oracle GraalVM Enterprise Edition 21.3.19.1.1. It allows unauthenticated attackers with network access via multiple protocols to compromise these products, potentially leading to a partial denial of service. The vulnerability is in the JAXP component, and defenders should assess exposure and prioritize updates for affected versions. The CVE record and NVD entry provide additional technical details.

Defensive priority

Defenders should prioritize verifying exposure in Java SE, GraalVM for JDK, and GraalVM Enterprise Edition deployments, especially in environments with untrusted code execution.

Recommended defensive actions

• Verify Java SE, GraalVM for JDK, and GraalVM Enterprise Edition versions in use against the list of affected versions.
• Assess network exposure and restrict access to JAXP components where possible.
• Review and update Java deployments to ensure they are running on secure, up-to-date versions.
• Monitor for unusual activity or errors related to Java applications.
• Perform an inventory of assets using Java SE, GraalVM for JDK, or GraalVM Enterprise Edition.
• Establish a change window for updating vulnerable versions of Java SE, GraalVM for JDK, or GraalVM Enterprise Edition.
• Track and document updates to vulnerable systems.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, affected versions, and potential impacts. However, specific details on exploitation or victim organizations are not provided. Defenders should verify the affected versions in their deployments and assess network exposure to JAXP components. The CVE Program record and NVD entry are official sources for this information. Additional details may be found in the Oracle advisory.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.