CVE-2026-83381

A flaw was found in OpenJDK. An unauthenticated remote attacker can exploit this vulnerability over a network by supplying crafted input to Application Programming Interfaces (APIs) within the Security component. Successful exploitation can result in unauthorized read and modification access to a subset of data accessible to the application.

This vulnerability is rated as having a Moderate impact because exploitation demands high complexity, requiring an attacker to target applications that expose specific SASL authentication endpoints or process untrusted authentication exchange data. In standard Red Hat Enterprise Linux server environments, Java services do not inherently expose vulnerable interfaces unless custom applications explicitly invoke the affected Security subsystem APIs. Exploitation cannot achieve full system takeover or complete service denial, restricting the potential consequence to unauthorized read or modification of a limited subset of application data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.