CVE-2026-97400

— UNSCOREDpublic exploit available

Published 2026-10-20 · Updated 2026-10-20

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code, may cause the analyst's machine to read an arbitrary local file named inside the bundle and send its contents to an arbitrary remote host.

Weaknesses

CWE-611, CWE-618

Public exploit & PoC references

https://github.com/eclipse-openj9/openj9/pull/25003

All references

https://github.com/eclipse-openj9/openj9/pull/25003
https://gitlab.eclipse.org/security/cve-assignment/-/work_items/324
https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/949

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-10025
MEDIUMCVE-2026-101893
HIGHCVE-2026-102127PoC
HIGHCVE-2026-102155
HIGHCVE-2026-104679
HIGHCVE-2026-106616
UNSCOREDCVE-2026-108357PoC
UNSCOREDCVE-2026-108358PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.