CVE-2026-111075

{
  "etk_id": "ETK-2026-2301",
  "cve_id": "CVE-2026-111075",
  "display_id": "CVE-2026-111075",
  "ghsa_id": "GHSA-9wq7-cgfv-cwx8",
  "euvd_id": "EUVD-2026-107138",
  "status": "in_pipeline",
  "anchor_state": "anchored",
  "title": "Out-of-bounds read in Eclipse OpenJ9 JITServer",
  "summary": "Eclipse OpenJ9 versions before 0.63 are affected in the JITServer message deserialization path. An unauthenticated remote attacker able to reach JITServer can cause the process to crash, resulting in denial of service.",
  "mitigation": "Upgrade Eclipse OpenJ9 to version 0.63 or later. Restrict network access to JITServer until upgrades are complete.",
  "vendor": "Eclipse Foundation",
  "product": "Eclipse OpenJ9",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0.8.0, < 0.63"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "0.63"
      ],
      "package_name": "Eclipse OpenJ9",
      "purl": null
    }
  ],
  "cwes": [
    191
  ],
  "cvss_score": 8.7,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": null,
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": null,
  "t0_at": "2026-10-21T08:00:32.804000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-21T08:00:32.804000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-21T08:00:32.804000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111075"
    }
  }
}