Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Oracle JRE Improper Access Control Vulnerability - CVE-2026-62574 - Vulnerability Database
Oracle JRE

Oracle JRE Improper Access Control Vulnerability - CVE-2026-62574

High
Reference: CVE-2026-62574
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-62574
Title: Oracle JRE Improper Access Control Vulnerability
Overview:

Vulnerability in the Oracle Java SE Oracle GraalVM for JDK Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE: 8u491 11.0.31 17.0.19 21.0.11 25.0.3 26.0.1 Oracle GraalVM for JDK: 17.0.19 and 21.0.11 Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE Oracle GraalVM for JDK Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE Oracle GraalVM for JDK Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Java SE Oracle GraalVM for JDK Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).