Skip to content
VulniPulse
Sign in
Highest advisory severityMedium 2 vendors · 2 advisories

CVE-2026-60589

CVE-2026-60589: 2 tracked advisory records across NetApp, Red Hat. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

NetApp

1 advisory
  • Advisory severityMedium6.8

    Medium [CVE-2026-60589 +2] August 2026 Java SE Vulnerabilities in NetApp Products

    NTAP-20260821-0009Source published Source updated

    This bulletin covers 3 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.

    Java SE versions 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, and 26.0.2 are susceptible to vulnerabilities that allow unauthenticated attackers with network access via multiple protocols (including HTTP and TLS) to compromise Oracle Java SE. Refer to “Oracle Critical Security Patch Update Advisory - August 2026” for additional details. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE accessible data, unauthorized access to critical data or complete access to all Oracle Java SE accessible data or unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Affected products: Data Infrastructure Insights and Data Secure Storage Workload Security Agent, E-Series SANtricity OS Controller Software…

    Affected products in this advisory
    • Data Infrastructure Insights and Data Secure Storage Workload Security Agent
    • E-Series SANtricity OS Controller Software
    • E-Series SANtricity Unified Manager and Web Services Proxy
    • OnCommand Insight

    1 more entries in the full advisory.

    Source-reported affected versions
    Affected-version details not available in this record.
    Source-reported fixed versions
    No fixed-version detail extracted. This does not mean no fix exists.
    Mitigation guidance
    • Refer to “Oracle Critical Security Patch Update Advisory - August 2026” for additional details.
    Workarounds
    • <p> If a product requires JRE but does not include it, please update JRE to a fixed version that aligns with the product requirements. <br><br> <a href="https://kb.netapp.com/Advice_and_Troubleshooting/Data_Infrastructure_Management/E-Series_SANtricity_Management_Software/How_to_update_the_Java_Runtime_Environment_(JRE)__Storage_Manager_11.10_or_later" target="_blank">Updating the Java Runtime Environment (JRE) used by SANtricity Storage Manager 11.10 or later </a> <br><br> In Full Support versions of Active IQ Unified Manager for Linux & Windows the Java software can be upgraded as specified in the product documentation. For assistance with upgrade issues please consult technical support. <br><br> In Full Support versions of OnCommand Insight the Java software can be upgraded. For assistance with the upgrade and access to the updated OnCommand Insight binaries please consult technical support. <br><br> </p>
    Full advisory and evidenceOpen source bulletin

Red Hat

1 advisory
  • Advisory severityLow3.7

    Low [CVE-2026-60589] Improve Resource Resolving (2026-08 Security Update)

    CVE-2026-60589Source published Source updated

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). Red Hat severity: Moderate — CVSS 3.7 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

    Affected products in this advisory
    • Red Hat Enterprise Linux 10.0 Extended Update Support
    • Red Hat Enterprise Linux 7 Extended Lifecycle Support
    • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
    • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

    18 more entries in the full advisory.

    Source-reported affected versions
    • 11.0.32
    • 17.0.20
    • 21.0.12
    • 25.0.4

    1 more entries in the full advisory.

    Source-reported fixed versions
    • java-21-openjdk-1:21.0.12.1.1-1.2.el10
    • java-25-openjdk-1:25.0.4.1.1-1.1.el10
    • java-21-openjdk-1:21.0.12.1.1-1.1.el10
    • java-1.8.0-openjdk-1:1.8.0.504.b01-1.1.el7_9

    27 more entries in the full advisory.

    Mitigation guidance
    No mitigation guidance extracted; consult the source.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Turn CVE research into alerts on your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features