{"schemaVersion":3,"id":"CVE-2026-70906","aliases":["UBUNTU-CVE-2026-70906","DEBIAN-CVE-2026-70906","CGA-24m8-xr5f-6m26","CGA-26rj-84xf-7653","CGA-26wf-2mx4-cg2p","CGA-2hcv-vp28-69w2","CGA-37w2-r8hc-rqmj","CGA-3mv9-c3g4-c3cm","CGA-42q8-c8jf-hfp3","CGA-49rf-mx24-8hmc","CGA-4f9v-jhvq-qm46","CGA-4qjg-288x-j58x","CGA-4vmp-pc2x-x8c4","CGA-53cp-rv9v-5jg9","CGA-66jq-8fxg-7xp7","CGA-6g3f-xwch-3w5m","CGA-6g3x-p47x-2jm3","CGA-6hh5-qj83-ffm2","CGA-6vxr-j755-8vmf","CGA-6xp4-rg9x-cpq8","CGA-6xpg-63hp-qxpc","CGA-73rf-xrhg-gxqm","CGA-82m2-rmm2-3xhr","CGA-8636-59x4-98jx","CGA-885j-54jc-qc2q","CGA-897r-m7wm-w4j9","CGA-8jfw-9gf9-j4rf","CGA-8p39-9vwm-99rh","CGA-8rmv-wc4j-hjjm","CGA-8v2f-8vcr-c6jj","CGA-8w5j-gg7g-jg5r","CGA-95pr-w3qx-vvj8","CGA-96vh-5c46-p7g7","CGA-9w3g-c7hp-q5h3","CGA-fp26-fp6q-g9rm","CGA-frph-ggm8-q46p","CGA-fv2m-vcw2-x4m7","CGA-fxvg-xpv8-x4pq","CGA-g2jx-x6v7-h74x","CGA-g8wx-fmxx-gjx8","CGA-hfhg-3p45-3c8x","CGA-hj48-74g2-gxvc","CGA-j9w7-fq6p-cwpx","CGA-jjx5-x3xq-hxxx","CGA-mvgc-6r8g-4ghc","CGA-mx7j-phf3-2xg2","CGA-ppm4-rpm6-8vxm","CGA-q42x-g7r2-fhmc","CGA-r3w3-j8q3-6jv7","CGA-rf3g-fcgh-8297","CGA-rjq3-7243-g7rg","CGA-rp8j-r4mf-j6c7","CGA-vvhv-gfcc-f2x5","CGA-w2f9-ppwq-2hq6","CGA-w4m9-g2wg-mqvc","CGA-w9v3-64m8-vj7g","CGA-wc3v-v562-72cg","CGA-wj97-5ccx-8vpc","CGA-wp9f-9j5c-cffg","CGA-xjcw-cmrv-7hjh"],"status":"published","duplicateOf":null,"title":null,"description":"Vulnerability in Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 25.0.4 and  26.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).","dates":{"published":"2026-08-18T21:02:27.077Z","modified":"2026-08-22T02:15:02.808Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0046,"percentile":0.38527,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.006999999999999975,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00453},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0046,"percentile":0.38527}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00453,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0046,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0046,"percentile":0.38527}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-400","name":"Uncontrolled Resource Consumption","description":"The product does not properly control the allocation and maintenance of a limited resource.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/400.html"}],"affected":[{"vendor":"chainguard","product":"openjdk-jipher-fips-25","name":"openjdk-jipher-fips-25","label":"openjdk-jipher-fips-25","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-jipher-fips-25","purlType":"apk","versions":[{"text":"< 25.0.4.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.0.4.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-jipher-fips-25-default-jdk","name":"openjdk-jipher-fips-25-default-jdk","label":"openjdk-jipher-fips-25-default-jdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-jipher-fips-25-default-jdk","purlType":"apk","versions":[{"text":"< 25.0.4.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.0.4.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-jipher-fips-25-default-jvm","name":"openjdk-jipher-fips-25-default-jvm","label":"openjdk-jipher-fips-25-default-jvm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-jipher-fips-25-default-jvm","purlType":"apk","versions":[{"text":"< 25.0.4.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.0.4.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-jipher-fips-25-demos","name":"openjdk-jipher-fips-25-demos","label":"openjdk-jipher-fips-25-demos","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-jipher-fips-25-demos","purlType":"apk","versions":[{"text":"< 25.0.4.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.0.4.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-jipher-fips-25-jre","name":"openjdk-jipher-fips-25-jre","label":"openjdk-jipher-fips-25-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-jipher-fips-25-jre","purlType":"apk","versions":[{"text":"< 25.0.4.1-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.0.4.1-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-cpu","name":"zulu-25-cpu","label":"zulu-25-cpu","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-cpu","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-cpu-dbg","name":"zulu-25-cpu-dbg","label":"zulu-25-cpu-dbg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-cpu-dbg","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-cpu-default-jdk","name":"zulu-25-cpu-default-jdk","label":"zulu-25-cpu-default-jdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-cpu-default-jdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-cpu-default-jvm","name":"zulu-25-cpu-default-jvm","label":"zulu-25-cpu-default-jvm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-cpu-default-jvm","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-cpu-demos","name":"zulu-25-cpu-demos","label":"zulu-25-cpu-demos","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-cpu-demos","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-cpu-doc","name":"zulu-25-cpu-doc","label":"zulu-25-cpu-doc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-cpu-doc","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-cpu-jmods","name":"zulu-25-cpu-jmods","label":"zulu-25-cpu-jmods","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-cpu-jmods","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-cpu-jre","name":"zulu-25-cpu-jre","label":"zulu-25-cpu-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-cpu-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-psu","name":"zulu-25-psu","label":"zulu-25-psu","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-psu","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-psu-dbg","name":"zulu-25-psu-dbg","label":"zulu-25-psu-dbg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-psu-dbg","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-psu-default-jdk","name":"zulu-25-psu-default-jdk","label":"zulu-25-psu-default-jdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-psu-default-jdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-psu-default-jvm","name":"zulu-25-psu-default-jvm","label":"zulu-25-psu-default-jvm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-psu-default-jvm","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-psu-demos","name":"zulu-25-psu-demos","label":"zulu-25-psu-demos","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-psu-demos","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-psu-doc","name":"zulu-25-psu-doc","label":"zulu-25-psu-doc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-psu-doc","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-psu-jmods","name":"zulu-25-psu-jmods","label":"zulu-25-psu-jmods","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-psu-jmods","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-25-psu-jre","name":"zulu-25-psu-jre","label":"zulu-25-psu-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-25-psu-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-26-psu","name":"zulu-26-psu","label":"zulu-26-psu","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-26-psu","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-26-psu-dbg","name":"zulu-26-psu-dbg","label":"zulu-26-psu-dbg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-26-psu-dbg","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-26-psu-default-jdk","name":"zulu-26-psu-default-jdk","label":"zulu-26-psu-default-jdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-26-psu-default-jdk","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-26-psu-default-jvm","name":"zulu-26-psu-default-jvm","label":"zulu-26-psu-default-jvm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-26-psu-default-jvm","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-26-psu-demos","name":"zulu-26-psu-demos","label":"zulu-26-psu-demos","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-26-psu-demos","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-26-psu-doc","name":"zulu-26-psu-doc","label":"zulu-26-psu-doc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-26-psu-doc","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-26-psu-jmods","name":"zulu-26-psu-jmods","label":"zulu-26-psu-jmods","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-26-psu-jmods","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zulu-26-psu-jre","name":"zulu-26-psu-jre","label":"zulu-26-psu-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zulu-26-psu-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"openjdk-25","name":"openjdk-25","label":"openjdk-25","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/openjdk-25","purlType":"deb","versions":[{"text":"< 25.0.4.1+1-1~deb13u1","noFixRecorded":false,"fixedIn":null},{"text":"< 25.0.4.1+1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.0.4.1+1-1~deb13u1 | < 25.0.4.1+1-1","eol":null,"hubHref":null},{"vendor":"debian","product":"openjdk-26","name":"openjdk-26","label":"openjdk-26","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/openjdk-26","purlType":"deb","versions":[{"text":"< 26.0.2.1+1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.0.2.1+1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-13","name":"openjdk-13","label":"openjdk-13","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-13","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-16","name":"openjdk-16","label":"openjdk-16","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-16","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-18","name":"openjdk-18","label":"openjdk-18","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-18","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-25","name":"openjdk-25","label":"openjdk-25","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-25","purlType":"deb","versions":[{"text":"< 25.0.4.1+1-1~22.04.4","noFixRecorded":false,"fixedIn":null},{"text":"< 25.0.4.1+1-1~24.04.4","noFixRecorded":false,"fixedIn":null},{"text":"< 25.0.4.1+1-1~26.04.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.0.4.1+1-1~22.04.4 | < 25.0.4.1+1-1~24.04.4 | < 25.0.4.1+1-1~26.04.4","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-9","name":"openjdk-9","label":"openjdk-9","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-9","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"oracle corporation","product":"oracle java se","name":"Oracle Java SE","label":"oracle java se","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"25.0.4","noFixRecorded":false,"fixedIn":null},{"text":"26.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"25.0.4 | 26.0.2","eol":null,"hubHref":"/vendor/oracle_corporation/oracle_java_se"}],"affectedCount":37,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.oracle.com/security-alerts/cspuaug2026.html","label":"www.oracle.com/security-alerts/cspuaug2026.html","hostname":"www.oracle.com","tags":["Vendor Advisory","REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-70906","label":"ubuntu.com/security/CVE-2026-70906","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-70906","label":"www.cve.org/CVERecord?id=CVE-2026-70906","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://openjdk.org/groups/vulnerability/advisories/2026-08-18","label":"openjdk.org/groups/vulnerability/advisories/2026-08-18","hostname":"openjdk.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-70906","label":"security-tracker.debian.org/tracker/CVE-2026-70906","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:11621-1","OPENSUSE-SU-2026:11639-1","OPENSUSE-SU-2026:11640-1","OPENSUSE-SU-2026:11641-1","OPENSUSE-SU-2026:11642-1","OPENSUSE-SU-2026:11643-1","OPENSUSE-SU-2026:21714-1","RHSA-2026:55798","RHSA-2026:57177","RHSA-2026:57765","SUSE-SU-2026:23591-1","SUSE-SU-2026:3999-1","SUSE-SU-2026:4107-1","SUSE-SU-2026:4153-1","USN-8783-1"],"duplicates":[],"related":["OPENSUSE-SU-2026:11621-1","OPENSUSE-SU-2026:11639-1","OPENSUSE-SU-2026:11640-1","OPENSUSE-SU-2026:11641-1","OPENSUSE-SU-2026:11642-1","OPENSUSE-SU-2026:11643-1","OPENSUSE-SU-2026:21714-1","SUSE-SU-2026:23591-1","SUSE-SU-2026:3999-1","SUSE-SU-2026:4107-1","SUSE-SU-2026:4153-1"]},"timeline":[{"kind":"published","date":"2026-08-18T21:02:27.077Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-22T02:15:02.808Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T01:04:35.033Z","stale":false,"partial":false}}