CVE-2026-83395

A flaw was found in OpenJDK. An unauthenticated remote attacker with network access could exploit this vulnerability by submitting crafted data to networking application programming interfaces (APIs). A successful attack could allow unauthorized modification or deletion of accessible data, or result in a partial Denial of Service (DoS).

This vulnerability is rated Moderate because successful exploitation requires specific environmental conditions, such as processing untrusted HTTP responses through client networking APIs, and cannot result in arbitrary code execution or unauthorized data exposure. In Red Hat environments, OpenJDK runtimes are exposed when Java applications handle responses from untrusted web endpoints or operate behind intermediary proxies subject to request desynchronization. Workloads that connect only to strictly trusted upstream servers are not exposed to this risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.