CVE-2026-91409

A flaw was found in the Java SE Networking component. An unauthenticated remote attacker with network access could exploit this vulnerability by submitting untrusted input to exposed application programming interfaces (APIs). A successful attack allows the adversary to cause a partial denial of service (DoS), reducing application availability.

This vulnerability is rated as Low impact for Red Hat products because successful exploitation requires complex conditions and results only in a partial denial of service with no loss of confidentiality or integrity. In typical Red Hat environments, exploitation necessitates that custom or deployed applications expose network services consuming untrusted data through the affected OpenJDK networking interfaces. Additionally, enterprise server installations do not run legacy sandboxed applets, significantly limiting the attack surface in practice.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.