Emergency Java Patch: Oracle Distrusts eMudhra Intermediates to Fix CVE-2026-91403
Oracle has released an emergency Java security update to address a critical certificate-trust vulnerability that could let attackers impersonate legitimate HTTPS services. Published October 21, 2026 and tracked as CVE-2026-91403 with a CVSS 3.1 score of 9.1, the issue affects the Java Secure Socket Extension (JSSE) and several GraalVM builds. Although Oracle reports no confirmed exploitations yet, the low complexity and lack of required authentication make this an urgent patch…