CVE-2026-16441

Katalog CVE

CVSS 9.6 · Critical EPSS 0,53%

Kerentanan Reliance on Undefined, Unspecified, or Implementation-Defined Behavior pada eclipse openj9. Skor CVSS 3.1 9.6 (Critical) menurut NVD.

Deskripsi (NVD)

In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.

Rincian

Terbit di NVD

21 Juli 2026

Terakhir diubah

18 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

9.6 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

EPSS (30 hari)

0,53% peluang dieksploitasi; lebih tinggi dari 43,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/eclipse-openj9/openj9/pull/24396 issue tracking · patch
• https://github.com/eclipse-openj9/openj9/security/advisories/GHSA-hcfc-9hjx-2q7f broken link
• https://gitlab.eclipse.org/security/cve-assignment/-/work_items/194 broken link