Critical Vulnerabilities detected on Oracle Java and Azul Zulu
Multiple vulnerabilities have been identified in both Oracle Java and Azul Zulu distributions across various JDK and JRE versions. These flaws could allow attackers to execute arbitrary code, escalate privileges, or cause denial-of-service conditions. Systems running outdated or unpatched Java environments are particularly at risk. Oracle has released fixes for several of these issues as part of its April 2026 Critical Patch Update, while some vulnerabilities in Azul Zulu are currently documented without corresponding patches. Applying available updates and monitoring vendor advisories is essential to secure affected Java deployments. Below are the vulnerability details:
| CVEs | Reference |
| CVE-2026-20652, CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-34268, CVE-2026-34282 | https://www.oracle.com/security-alerts/cpuapr2026.html |
| CVE-2026-20652, CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-34268, CVE-2026-34282 | https://www.oracle.com/security-alerts/cpuapr2026.html |
| CVE-2026-20652, CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-34268, CVE-2026-34282 | https://www.oracle.com/security-alerts/cpuapr2026.html |
| CVE-2026-20652, CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-34268, CVE-2026-34282 | https://www.oracle.com/security-alerts/cpuapr2026.html |
| CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268, CVE-2026-34282 | https://docs.azul.com/core/cve |
| CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268, CVE-2026-34282 | https://www.oracle.com/security-alerts/cpuapr2026.html |
| CVE-2026-22008 | https://www.oracle.com/security-alerts/cpuapr2026.html |
| CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268, CVE-2026-34282 | https://www.oracle.com/security-alerts/cpuapr2026.html |
| CVE-2026-20652, CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268 | https://docs.azul.com/core/cve |
| CVE-2026-20652, CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268 | https://docs.azul.com/core/cve |
| CVE-2026-20652, CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268, CVE-2026-34282 | https://docs.azul.com/core/cve |
| CVE-2026-20652, CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268, CVE-2026-34282 | https://docs.azul.com/core/cve |
| CVE-2026-20652, CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268, CVE-2026-34282 | https://docs.azul.com/core/cve |
| CVE-2026-20652, CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268, CVE-2026-34282 | https://docs.azul.com/core/cve |
| CVE-2026-20652, CVE-2026-22007, CVE-2026-22008, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268, CVE-2026-34282 | https://docs.azul.com/core/cve |
| CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268, CVE-2026-34282 | https://www.oracle.com/security-alerts/cpuapr2026.html |
| CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-23865, CVE-2026-34268, CVE-2026-34282 | https://www.oracle.com/security-alerts/cpuapr2026.html |
Immediately deploy patches for vulnerabilities where fixes are available. To patch the vulnerabilities using Patch Manager Plus, initiate a database sync between thePatch Manager Plus server and the Central Patch repository and search for these Patch IDs or Bulletin ID. Select the patches and deploy them to your target machines. For vulnerabilities where patches have not yet been released, it is recommended to continuously monitor vendor advisories, apply available mitigations or workarounds, and restrict exposure by limiting access to affected applications until official fixes become available.
Cheers,
ManageEngine Team
Sticky Posts
Windows all set to initiate automatic upgrade to the latest 1909 feature pack
Hi everyone, The support for Windows 10 Home, Pro, Pro Education, and Pro for Workstations editions on 1809 ends May 12, 2020. Microsoft pushes computers running on the October 2018 update, version 1809, to update to the November 2019 update, version 1909 automatically. The process that will initiate this automatic update will be rolled out real soon, says Microsoft. In case of such automatic updates in a diverse network environment, there are high chances of incompatibilities. If you are usingPlanned maintenance of our US Data center on Dec 19th & 21st
Dear Customers, We have planned a network infrastructure upgrade on our primary Data center in the USA on Dec 19, 2019 from 6:30 PM to 10:00 PM PST and Dec 21st, 2019 from 6:30 PM to 10:00 PM PST. During this upgrade, we will be switching Patch Manager Plus, Mobile Device Manager Plus, and Remote Access Plus from the endpoint management suite to our secondary Data Center to ensure that our services continue functioning. We do not expect any disturbances to the services during this period, but should[Free Seminar] Secure your organization's endpoints against the latest cyberattacks and security vulnerabilities
Be it WannaCry, Meltdown, Spectre or Petya each year bears witness to new cyberattacks and security vulnerabilities, and the year 2019 is no different. From the BlueKeep vulnerability that affects over a million systems, to the ZombieLoad attack that affects nearly every Intel chip since 2011, IT teams across the globe face an uphill battle this year to secure their organization's desktops and mobile devices. Organizations irrespective of the industry they cater to, are often caught unawares byShare your thoughts about Patch Manager Plus and earn a gift card!
Dear folks, Thanks for your continued support of Patch Manager Plus. We would like to hear how we are faring. You can review us on IT Central Station here: https://www.itcentralstation.com/lp/vendor_invite?product_id=manageengine-patch-manager-plus Also, you can review us on Capterra: http://ca.gartnerdigitalmarkets.com/Patch-Manager-Plus-179288-SS-01_Write_a_Review.html What more, you will be entitled for a gift coupon worth $10 upon reviewing us on Capterra! Keep your reviews coming, your reviewsJoin us for an Endpoint Security seminar this November!
2018 is coming to an end but the fight against this year's cyberthreats is far from over. ManageEngine brings you an Endpoint Security and Management seminar where you'll have a chance to work with product experts on formulating a plan to protect your endpoints from different malware, including ransomware. Join us at any of our one-day complimentary seminars in Mumbai and Bangalore and show these threats who's boss! Register now to save your spot! What's in it for you? Discover the top cybersecurity
