CVE-2026-71054
Quick assessment
Affected
Oracle Corporation Oracle Java SE
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Oracle Java SE（组件：2D）中存在一个漏洞。受影响的受支持版本为 Oracle Java SE: 7u511。该漏洞易于利用，允许拥有网络访问权限的未认证攻击者通过多种协议利用该漏洞来破坏 Oracle Java SE 的安全。成功利用该漏洞可能导致攻击者能够导致 Oracle Java SE 发生挂起或可重复发生的崩溃（完全拒绝服务，即完全 DOS）。 注意：该漏洞可通过使用指定组件中的 API 来利用，例如通过向这些 API 提供数据的 Web 服务进行利用。此外，该漏洞也适用于加载并运行不受信任
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-71054
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Vulnerability in Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u511. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Oracle Corporation | Oracle Java SE | 7u511 | - |
|
II. Public POCs for CVE-2026-71054
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-71054
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-71054 (1)
-
🔗 Sign in options vendor-advisory
IV. Related Vulnerabilities
V. Comments for CVE-2026-71054
No comments yet