CVE-2026-87287 Oracle Corporation CVE debrief

Who should care

Defenders responsible for Oracle GraalVM deployments, particularly those with network exposure, should assess and verify their systems. This includes operators, platform administrators, vulnerability management teams, and security teams who need to prioritize verifying exposure of Oracle GraalVM version 25.0.4.1 and assessing network access controls. They should also review compensating controls for exposed systems and monitor for suspicious activity.

Why it matters

Defenders should prioritize verifying exposure of Oracle GraalVM version 25.0.4.1 and assessing network access controls due to the high-severity vulnerability allowing potential takeover.

• Potential takeover of Oracle GraalVM instances
• Compromise of confidentiality, integrity, and availability

Technical summary

The vulnerability in Oracle GraalVM product of Oracle Java SE (component: Compiler) allows unauthenticated attackers with network access via HTTP to compromise Oracle GraalVM, potentially leading to takeover. The CVSS score is 8.1, indicating high severity. The supported version affected is Oracle GraalVM: 25.0.4.1. This vulnerability can result in takeover of Oracle GraalVM instances, impacting confidentiality, integrity, and availability. Defenders should prioritize verifying exposure of Oracle GraalVM version 25.0.4.1 and assessing network access controls.

Defensive priority

Defenders should prioritize verifying exposure of Oracle GraalVM version 25.0.4.1 and assessing network access controls.

Recommended defensive actions

• Verify Oracle GraalVM version 25.0.4.1 is not exposed to untrusted networks
• Assess network access controls to prevent unauthorized HTTP access
• Monitor Oracle GraalVM for suspicious activity
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability in Oracle GraalVM. The CVSS score is 8.1, indicating high severity. Defenders should verify exposure of Oracle GraalVM version 25.0.4.1 and assess network access controls. Evidence from Oracle security alerts and NVD detail pages suggests potential takeover of Oracle GraalVM instances. The vulnerability allows unauthenticated attackers with network access via HTTP to compromise Oracle GraalVM.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.