CVE-2026-16441

EUVD-2026-46359
In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.6 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 20.13%
Affected Products (NVD)
VendorProductVersion
eclipseopenj9
0.8.0 ≤
𝑥
< 0.60.0
𝑥
= Vulnerable software versions
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
java-1.8.0-ibm
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-demo
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-devel
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-headless
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-jdbc
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-plugin
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-src
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
java-1.8.0-ibm-webstart
RHEL 8
1:1.8.0.8.70-1.el8_10
fixed
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://github.com/eclipse-openj9/openj9/pull/24396
https://github.com/eclipse-openj9/openj9/security/advisories/GHSA-hcfc-9hjx-2q7f
https://gitlab.eclipse.org/security/cve-assignment/-/work_items/194