CVE-2026-16440 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
eclipse	CNA	5.7 MEDIUM	NETWORK	LOW	LOW	CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 13.09%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
eclipse	openj9	0.8.0 ≤ 𝑥 < 0.60	CNA

Red Hat Enterprise Linux Releases

Red Hat Product

Release

java-1.8.0-ibm

RHEL 8

1:1.8.0.8.71-1.el8_10

fixed

java-1.8.0-ibm-demo

RHEL 8

1:1.8.0.8.71-1.el8_10

fixed

java-1.8.0-ibm-devel

RHEL 8

1:1.8.0.8.71-1.el8_10

fixed

java-1.8.0-ibm-headless

RHEL 8

1:1.8.0.8.71-1.el8_10

fixed

java-1.8.0-ibm-jdbc

RHEL 8

1:1.8.0.8.71-1.el8_10

fixed

java-1.8.0-ibm-plugin

RHEL 8

1:1.8.0.8.71-1.el8_10

fixed

java-1.8.0-ibm-src

RHEL 8

1:1.8.0.8.71-1.el8_10

fixed

java-1.8.0-ibm-webstart

RHEL 8

1:1.8.0.8.71-1.el8_10

fixed

Common Weakness Enumeration

CWE-674 - Uncontrolled Recursion
The product does not properly control the amount of recursion which takes place, consuming excessive resources, such as allocated memory or the program stack.

Vulnerability Media Exposure

[GERMAN] IBM Java SDK: Schwachstelle ermöglicht Denial of Service
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in IBM Java SDK ausnutzen, um einen Denial of Service Angriff durchzuführen.
Published: 2026-08-26T22:00:00+00:00

References

https://github.com/eclipse-openj9/openj9/pull/24572

https://github.com/eclipse-openj9/openj9/security/advisories/GHSA-ch6r-v7rg-4jqx