CVE-2026-87293

A flaw was found in OpenJDK's Remote Method Invocation (RMI) component. An unauthenticated remote attacker can exploit this vulnerability by sending crafted data to exposed application programming interfaces (APIs). Successful exploitation allows unauthorized modification, deletion, or disclosure of accessible data, potentially impacting other connected systems.

Red Hat rates this vulnerability as Moderate severity because exploitation requires high attack complexity against exposed Remote Method Invocation (RMI) communication channels, without enabling full system compromise. The issue predominantly affects environments utilizing OpenJDK 8 where applications expose RMI endpoints across untrusted networks. Modern runtimes supported on Red Hat Enterprise Linux, including OpenJDK 11 and later versions, do not contain the vulnerable code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.