THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-22016 (HIGH 7.5) — Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalV

[NVD] CVE-2026-22016 (HIGH 7.5) — Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalV

lownvdPublished 2026-04-21

CVE-2026-22016 CVSS: 7.5 HIGH Published: 2026-04-21T21:16:28.470

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and 21.0.10; Oracle GraalVM Enterp

MITRE ATT&CK techniques

Web ServiceT1102

Indicators of compromise

CVE-2026-22016cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-22016