CVE-2026-16439 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	9.1 CRITICAL	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 14.91%

Affected Products (NVD)

Vendor	Product	Version
eclipse	openj9	0.8.0 ≤ 𝑥 < 0.60.0

𝑥

= Vulnerable software versions

Red Hat Enterprise Linux Releases

Red Hat Product

Release

java-1.8.0-ibm

RHEL 8

1:1.8.0.8.70-1.el8_10

fixed

java-1.8.0-ibm-demo

RHEL 8

1:1.8.0.8.70-1.el8_10

fixed

java-1.8.0-ibm-devel

RHEL 8

1:1.8.0.8.70-1.el8_10

fixed

java-1.8.0-ibm-headless

RHEL 8

1:1.8.0.8.70-1.el8_10

fixed

java-1.8.0-ibm-jdbc

RHEL 8

1:1.8.0.8.70-1.el8_10

fixed

java-1.8.0-ibm-plugin

RHEL 8

1:1.8.0.8.70-1.el8_10

fixed

java-1.8.0-ibm-src

RHEL 8

1:1.8.0.8.70-1.el8_10

fixed

java-1.8.0-ibm-webstart

RHEL 8

1:1.8.0.8.70-1.el8_10

fixed

Common Weakness Enumeration

CWE-124 - Buffer Underwrite ('Buffer Underflow')
The software writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.

Vulnerability Media Exposure

[GERMAN] IBM License Metric Tool: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in IBM License Metric Tool ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren und um Sicherheitsvorkehrungen zu umgehen.
Published: 2026-08-20T22:00:00+00:00

References

https://github.com/eclipse-openj9/openj9/pull/24394

https://gitlab.eclipse.org/security/cve-assignment/-/work_items/192