CVE-2026-87292

A flaw was found in the OpenJDK networking component. This vulnerability may allow an unauthenticated remote attacker to cause unauthorized data modification. By supplying crafted input to exposed networking application programming interfaces (APIs), such as through a web service, an attacker can insert, update, or delete a subset of accessible data.

Red Hat Product Security rates this vulnerability as Low impact due to the high attack complexity required to manipulate network client interactions and the absence of confidentiality or availability consequences. Exploitation requires an application to pass unsanitized input directly into networking client interfaces or execute untrusted sandboxed code, scenarios that are atypical in enterprise deployments. As a result, potential exposure is restricted to limited unauthorized data modifications under specialized execution conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.