Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital certificates.

Oracle patches critical Java vulnerability CVE-2026-91403, rated 9.1. Check affected versions and learn how to secure Java applications.

Oracle has issued emergency Java updates that remove root certificates associated with a certificate authority key compromise, requiring development teams to check the runtimes their applications use.

Regarding the Java vulnerabilities announced between October 20th and 24th, the October edition of IBM's Java, "IBM Semeru ...

Azul will provide CSPUs across all the LTS versions it supports — Java 8, 11, 17, 21 and 25 — as well as the current release (Java 26). Azul will also deliver CSPUs for the Java 6 and 7 versions it ...