Tagged

Java

Java security alerts and patching guidance, including emergency Oracle updates and bundled runtimes that are easy to miss.

2 posts

October 26, 2026 · 6 min read

Atlassian CVE-2026-21589: a critical file-read flaw in Data Center, now on CISA's exploited list

An unauthenticated file-read flaw (CVSS 9.3) affects every version of eight Atlassian Data Center products, including Jira, Confluence, and Bitbucket. It was disclosed on October 5 and added to CISA's Known Exploited Vulnerabilities catalog on October 15. A detailed look at the timeline, fixed versions, and what to do.

Cybersecurity

Java

October 26, 2026 · 5 min read

Oracle's emergency Java patch: what CVE-2026-91403 is, and why 'we already patched Java' may not be enough

Oracle issued an out-of-band security alert on October 21 for a critical flaw (CVSS 9.1) in Java's TLS component. A detailed look at what's known, what isn't, which versions are affected, and how to find every Java runtime you actually run.

Cybersecurity

Java