CVE-2026-91451

A flaw was found in the Networking component of OpenJDK. This vulnerability allows an unauthenticated remote attacker to cause unauthorized data modification by sending crafted input to exposed Application Programming Interfaces (APIs), such as through web services. Successful exploitation enables an attacker to insert, update, or delete data accessible to the application.

This vulnerability is rated as having a Moderate impact because exploitation is constrained to partial integrity loss without allowing unauthorized information disclosure or total denial of service. Within Red Hat environments, the issue primarily threatens Java applications that directly parse untrusted network traffic via built-in HTTP server networking APIs rather than through hardened reverse proxies. Even when successfully triggered by an unauthenticated remote attacker, the exploit cannot achieve arbitrary code execution or elevate privileges on the underlying operating system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.