{"schema":"vulnpedia.research/1","cve":"CVE-2026-91403","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://www.oracle.com/security-alerts/alert-cve-2026-91403.html","tags":["vendor-advisory","vendor-reference"],"source":"mitre","sourceId":"oracle","modified":"2026-10-21T21:23:28.057Z","origins":[{"source":"mitre","sourceId":"oracle","modified":"2026-10-21T21:23:28.057Z","url":"https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"},{"source":"nvd","sourceId":"CVE-2026-91403","modified":"2026-10-24T20:16:30.970","url":"https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-91403","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-91403"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558584","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558584"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91403","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-91403"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403"}]},{"url":"https://openjdk.org/groups/vulnerability/advisories/2026-10-21","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://openjdk.org/groups/vulnerability/advisories/2026-10-21"}]},{"source":"euvd","sourceId":"EUVD-2026-107578","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107578","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-107578","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-107578"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/Carl0gonzalez/java-security-update","source":"poc-in-github","sourceId":"CVE-2026-91403","description":"Security update for CVE-2026-91403","modified":"2026-10-22T19:41:24Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-91403","url":"https://github.com/Carl0gonzalez/java-security-update"},{"source":"poc-in-github","sourceId":"CVE-2026-91403","modified":"2026-10-22T19:41:24Z","url":"https://github.com/Carl0gonzalez/java-security-update"}],"tags":[]},{"url":"https://github.com/hubly12/javafix","source":"poc-in-github","sourceId":"CVE-2026-91403","description":"Check and fix Java runtimes for CVE-2026-91403 (compromised eMudhra intermediates) on Windows and macOS — consent-first, no dependencies, no network.","modified":"2026-10-23T07:36:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-91403","url":"https://github.com/hubly12/javafix"},{"source":"poc-in-github","sourceId":"CVE-2026-91403","modified":"2026-10-23T07:36:03Z","url":"https://github.com/hubly12/javafix"}],"tags":[]},{"url":"https://github.com/FahrihFatahilah/CVE-2026-91403-eMudhra-Java-Scanner","source":"poc-in-github","sourceId":"CVE-2026-91403","modified":"2026-10-26T02:53:16Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-91403","url":"https://github.com/FahrihFatahilah/CVE-2026-91403-eMudhra-Java-Scanner"},{"source":"poc-in-github","sourceId":"CVE-2026-91403","modified":"2026-10-26T02:53:16Z","url":"https://github.com/FahrihFatahilah/CVE-2026-91403-eMudhra-Java-Scanner"}],"tags":[]},{"url":"https://github.com/siladu/fix-cve-2026-91403","source":"poc-in-github","sourceId":"CVE-2026-91403","modified":"2026-10-24T01:30:38Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-91403","url":"https://github.com/siladu/fix-cve-2026-91403"},{"source":"poc-in-github","sourceId":"CVE-2026-91403","modified":"2026-10-24T01:30:38Z","url":"https://github.com/siladu/fix-cve-2026-91403"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_build_of_openjdk_1.8:java-openjdk.win.jdk.x86_64.zip","product":"java-openjdk.win.jdk.x86_64.zip as a component of Red Hat build of OpenJDK 1.8","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:generic/java-openjdk.win.jdk.x86_64.zip","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_build_of_openjdk_25:java-25-openjdk.portable.jdk.x86_64.tar.xz","product":"java-25-openjdk.portable.jdk.x86_64.tar.xz as a component of Red Hat build of OpenJDK 25","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:generic/java-25-openjdk.portable.jdk.x86_64.tar.xz","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_10:java-21-openjdk-headless","product":"java-21-openjdk-headless as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-21-openjdk-headless","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_10:java-21-openjdk-slowdebug","product":"java-21-openjdk-slowdebug as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-21-openjdk-slowdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_10:java-25-openjdk","product":"java-25-openjdk as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-25-openjdk","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_10:java-25-openjdk-devel-fastdebug","product":"java-25-openjdk-devel-fastdebug as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-25-openjdk-devel-fastdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_10:java-25-openjdk-jmods-fastdebug","product":"java-25-openjdk-jmods-fastdebug as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-25-openjdk-jmods-fastdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_10:java-25-openjdk-static-libs-slowdebug","product":"java-25-openjdk-static-libs-slowdebug as a component of Red Hat Enterprise Linux 10","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-25-openjdk-static-libs-slowdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_6:java-1.8.0-openjdk-headless","product":"java-1.8.0-openjdk-headless as a component of Red Hat Enterprise Linux 6","status":"known_affected","remediations":[{"category":"no_fix_planned","details":"Out of support scope"}],"purl":"pkg:rpm/redhat/java-1.8.0-openjdk-headless","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_7:java-1.8.0-openjdk-accessibility","product":"java-1.8.0-openjdk-accessibility as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-1.8.0-openjdk-accessibility","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_7:java-1.8.0-openjdk-javadoc","product":"java-1.8.0-openjdk-javadoc as a component of Red Hat Enterprise Linux 7","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-1.8.0-openjdk-javadoc","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_8:java-1.8.0-openjdk-accessibility","product":"java-1.8.0-openjdk-accessibility as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-1.8.0-openjdk-accessibility","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_8:java-1.8.0-openjdk-devel-slowdebug","product":"java-1.8.0-openjdk-devel-slowdebug as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-1.8.0-openjdk-devel-slowdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_8:java-1.8.0-openjdk-src","product":"java-1.8.0-openjdk-src as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-1.8.0-openjdk-src","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_8:java-17-openjdk-devel-fastdebug","product":"java-17-openjdk-devel-fastdebug as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-17-openjdk-devel-fastdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_8:java-17-openjdk-jmods","product":"java-17-openjdk-jmods as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-17-openjdk-jmods","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_8:java-17-openjdk-static-libs-fastdebug","product":"java-17-openjdk-static-libs-fastdebug as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-17-openjdk-static-libs-fastdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_8:java-21-openjdk-devel-fastdebug","product":"java-21-openjdk-devel-fastdebug as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-21-openjdk-devel-fastdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_8:java-21-openjdk-jmods-fastdebug","product":"java-21-openjdk-jmods-fastdebug as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-21-openjdk-jmods-fastdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_8:java-21-openjdk-static-libs-slowdebug","product":"java-21-openjdk-static-libs-slowdebug as a component of Red Hat Enterprise Linux 8","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-21-openjdk-static-libs-slowdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_9:java-1.8.0-openjdk-devel-slowdebug","product":"java-1.8.0-openjdk-devel-slowdebug as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-1.8.0-openjdk-devel-slowdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_9:java-1.8.0-openjdk-src","product":"java-1.8.0-openjdk-src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-1.8.0-openjdk-src","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_9:java-17-openjdk-devel-fastdebug","product":"java-17-openjdk-devel-fastdebug as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-17-openjdk-devel-fastdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_9:java-17-openjdk-jmods","product":"java-17-openjdk-jmods as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-17-openjdk-jmods","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_9:java-17-openjdk-static-libs-fastdebug","product":"java-17-openjdk-static-libs-fastdebug as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-17-openjdk-static-libs-fastdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_9:java-21-openjdk-devel-fastdebug","product":"java-21-openjdk-devel-fastdebug as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-21-openjdk-devel-fastdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_9:java-21-openjdk-jmods-fastdebug","product":"java-21-openjdk-jmods-fastdebug as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-21-openjdk-jmods-fastdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_9:java-21-openjdk-static-libs-slowdebug","product":"java-21-openjdk-static-libs-slowdebug as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-21-openjdk-static-libs-slowdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_9:java-25-openjdk-demo-slowdebug","product":"java-25-openjdk-demo-slowdebug as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-25-openjdk-demo-slowdebug","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_9:java-25-openjdk-javadoc","product":"java-25-openjdk-javadoc as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-25-openjdk-javadoc","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_enterprise_linux_9:java-25-openjdk-static-libs","product":"java-25-openjdk-static-libs as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:rpm/redhat/java-25-openjdk-static-libs","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]},{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json","productId":"red_hat_hardened_images:java-25-openjdk.src","product":"java-25-openjdk.src as a component of Red Hat Hardened Images","status":"known_affected","remediations":[{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/java-25-openjdk?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-91403","modified":"2026-10-23T16:43:05+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-91403.json"}]}],"vendorCoverage":{"total":257,"shown":32,"omitted":225,"source":"redhat"}}