CVE-2026-6918

HIGH 7.5CVE-2026-6918 · Published 05/05/2026 · updated 26/10/2026

In short

CVE-2026-6918 is a HIGH (CVSS 7.5) vulnerability affecting openj9 (eclipse).
Chance of exploitation in the next 30 days (EPSS): 0.52%, higher than 44.0% of all vulnerabilities.
Fix: update to 0.59.0 or later.

Package	Affected versions	Patched versions
openj9 eclipse	`≥ 0.21.0, < 0.59.0`	`0.59.0`

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 0.21.0, < 0.59.0

0.59.0

More vulnerabilities in openj9

See all →