CVE-2026-47058

High [CVE-2026-47057 +1] July 2026 Java Platform Standard Edition 8u491, 8u491-perf, 11.0.31 Vulnerabilities in NetApp Products

NTAP-20260724-0017Source published Jul 24, 2026Source updated Jul 29, 2026

This bulletin covers 2 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.

Java SE versions 8u491, 8u491-perf and 11.0.31 are susceptible to vulnerabilities that could allow an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Refer to “Oracle Critical Patch Update Advisory - July 2026” for additional details. Successful attacks of these vulnerabilities can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE accessible data. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status.

Affected products in this advisory

No product details extracted. Check the source bulletin.

Source-reported affected versions

Affected-version details not available in this record.

Source-reported fixed versions

No fixed-version detail extracted. This does not mean no fix exists.

Mitigation guidance

• Refer to “Oracle Critical Patch Update Advisory - July 2026” for additional details.

Workarounds

• <p> If a product requires JRE but does not include it, please update JRE to a fixed version that aligns with the product requirements. <br><br> <a href="https://kb.netapp.com/Advice_and_Troubleshooting/Data_Infrastructure_Management/E-Series_SANtricity_Management_Software/How_to_update_the_Java_Runtime_Environment_(JRE)__Storage_Manager_11.10_or_later" target="_blank">Updating the Java Runtime Environment (JRE) used by SANtricity Storage Manager 11.10 or later </a> <br><br> In Full Support versions of Active IQ Unified Manager for Linux & Windows the Java software can be upgraded as specified in the product documentation. For assistance with upgrade issues please consult technical support. <br><br> In Full Support versions of OnCommand Insight the Java software can be upgraded. For assistance with the upgrade and access to the updated OnCommand Insight binaries please consult technical support. <br><br> </p>

High [CVE-2026-47058] Enhance Dataview Implementation (Oracle CPU 2026-07)

CVE-2026-47058Source published Jul 21, 2026Source updated Jul 21, 2026

Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java…

Affected products in this advisory

• OPENJDK ELS 11.0.32
• Red Hat Build of OpenJDK 8u502
• Red Hat Enterprise Linux 7 Extended Lifecycle Support
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

15 more entries in the full advisory.

Source-reported affected versions

• 11.0.31

Source-reported fixed versions

• java-11-openjdk-portable
• java-11-openjdk-windows
• java-1.8.0-openjdk-portable
• java-1.8.0-openjdk-windows

16 more entries in the full advisory.

Mitigation guidance

No mitigation guidance extracted; consult the source.