CVE-2026-83381

High [CVE-2026-101516 +26] October 2026 Java SE Vulnerabilities 8u503, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27 in NetApp Products

NTAP-20261030-0021Source published Oct 30, 2026Source updated Oct 30, 2026

This bulletin covers 27 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.

Java SE version 8u503, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1 and 27 is susceptible to multiple vulnerabilities that allow an unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Refer to “Oracle Critical Patch Update Advisory - October 2026” for additional details. Successful attacks of these vulnerabilities can result in unauthorized access to some or all of Oracle Java SE accessible data or unauthorized ability to cause a Denial of Service (DOS) of Oracle Java SE. Affected products: Data Infrastructure Insights and Data Secure Storage Workload Security Agent, ONTAP tools for VMware vSphere 10. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status.

Affected products in this advisory

• Data Infrastructure Insights and Data Secure Storage Workload Security Agent
• ONTAP tools for VMware vSphere 10

Source-reported affected versions

Affected-version details not available in this record.

Source-reported fixed versions

No fixed-version detail extracted. This does not mean no fix exists.

Mitigation guidance

• Refer to “Oracle Critical Patch Update Advisory - October 2026” for additional details.

Workarounds

• <p> If a product requires Java but does not include it, please update Java to a fixed version that aligns with the product requirements. <br><br> <a href="https://kb.netapp.com/Advice_and_Troubleshooting/Data_Infrastructure_Management/E-Series_SANtricity_Management_Software/How_to_update_the_Java_Runtime_Environment_(JRE)__Storage_Manager_11.10_or_later" target="_blank">Updating the Java Runtime Environment (JRE) used by SANtricity Storage Manager 11.10 or later </a> <br><br> In Full Support versions of Active IQ Unified Manager for Linux & Windows the Java software can be upgraded as specified in the product documentation. For assistance with upgrade issues please consult technical support. <br><br> In Full Support versions of OnCommand Insight the Java software can be upgraded. For assistance with the upgrade and access to the updated OnCommand Insight binaries please consult technical support. <br><br> </p>

Medium [CVE-2026-83381] Enhance SASL Authentication (Oracle CPU 2026-10)

CVE-2026-83381Source published Oct 20, 2026Source updated Oct 20, 2026

Enhance SASL Authentication (Oracle CPU 2026-10). Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-303. Red Hat lists fixing advisory RHSA-2026:88352 with package java-25-openjdk-portable, java-25-openjdk-1:25.0.5.0.8-1.0.el9, java-25-openjdk-windows, java-21-openjdk-portable. Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8.

Related products — impact not confirmed

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8

Source-reported affected versions

• 11.0.32.1
• 17.0.20.1
• 21.0.12.1
• 25.0.4.1

Source-reported fixed versions

• java-25-openjdk-portable
• java-25-openjdk-1:25.0.5.0.8-1.0.el9
• java-25-openjdk-windows
• java-21-openjdk-portable

6 more entries in the full advisory.

Mitigation guidance

No mitigation guidance extracted; consult the source.