CVE-2026-91403: Java JSSE Certificate-Trust Vulnerability — eMudhra Intermediate CA Explained
Oracle released an out-of-band fix for CVE-2026-91403 (CVSS 9.1), a JSSE/TLS trust vulnerability in Java SE, GraalVM, and OpenJDK. Eight compromised eMudhra intermediate CAs put every JVM client at risk of man-in-the-middle attacks. Learn the root cause, affected versions, and how to verify and harden your local JDK.
Read Full Article