CVE-2026-83374

A flaw was found in OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by sending crafted requests across network protocols to exposed application programming interfaces (APIs) within the Security component. A successful attack can result in unauthorized modification, creation, or deletion of critical application data. In addition, the flaw may allow untrusted code running in a restricted sandbox environment to tamper with protected data.

This vulnerability is rated as Moderate impact because exploitation carries high complexity, requiring targeted conditions where an application exposes PKCS#5 cryptographic padding routines directly to unauthenticated network input. In typical Red Hat Enterprise Linux and container deployments, Java applications do not process raw cipher data from untrusted clients without intermediate validation layers or authentication. Furthermore, the scope is limited to data integrity without compromising confidentiality or causing service denial.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.