CVE-2026-83376

A flaw was found in the Java Secure Socket Extension (JSSE) component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability over a Transport Layer Security (TLS) connection to perform unauthorized modification, insertion, or deletion of accessible data. Exploitation occurs when network services or applications process untrusted network input through affected JSSE APIs, compromising data integrity.

This vulnerability is rated as having a Low impact because exploitation requires complex conditions during TLS negotiation and results only in partial integrity compromise, with no loss of confidentiality or system availability. In typical Red Hat Enterprise Linux and OpenJDK deployments, TLS connections utilize standard certificate validation pipelines and trust stores, preventing straightforward or broad exploitation. Consequently, the operational risk in standard environments is minimal.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.