← All advisories

High severity7.5NVD Advisory· Published May 5, 2026· Updated Jul 15, 2026

CVE-2026-6918

CVE-2026-6918

Description

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Eclipse Openj9/Openj9references
Eclipse/Openj9
cpe:2.3:a:eclipse:openj9:*:*:*:*:*:*:*:*
Range: >=0.21.0,<0.59.0
Eclipse/Open9Jllm-create
Range: 0.21 to 0.58

Patches

Vulnerability mechanics

References

6

github.com/eclipse-openj9/openj9/pull/23793nvdIssue TrackingPatch
github.com/eclipse-openj9/openj9/security/advisories/GHSA-q393-vr4c-969rnvdExploitVendor Advisory
access.redhat.com/errata/RHSA-2026:22328nvd
access.redhat.com/security/cve/CVE-2026-6918nvd
bugzilla.redhat.com/show_bug.cginvd
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6918.jsonnvd

News mentions

0

No linked articles in our index yet.