CVE-2026-83400

A flaw was found in the Java API for XML Processing (JAXP) component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting crafted data across the network to applications that expose JAXP interfaces, such as through a web service. Successful exploitation can result in a partial Denial of Service (DoS), reducing the availability of the application.

This vulnerability is rated as Moderate severity because, although remotely exploitable without authentication, the blast radius is confined to a partial denial of service without compromising system confidentiality or integrity. Java applications hosted on Red Hat platforms that parse untrusted XML input via exposed endpoints are potentially susceptible to resource exhaustion. Environments that do not ingest external XML payloads or that restrict access to trusted clients remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.