Oracle updates Java trust certificates, removing affected eMudhra root certificates

Oracle issued a Java and GraalVM security advisory for CVE-2026-114820, providing updates that remove affected eMudhra root certificates and advising users to check their installed versions.

Original synthetic illustration of an old certificate being removed from a glass certificate chain
Illustration · Source ↗ · About this image ↗

Source Facts

The official revision history lists 24 October as the first publication date. The advisory provides affected versions and patch links, instructing users to update Java or apply the listed mitigations.

This change affects certificate trust decisions. Before deployment, inventory the Java environments used by services, test required connections and certificate chains, and address compatibility issues using official documentation.

Next Steps for Businesses / Editorial Observations

Maintain certificate trust stores according to security advisories and verify service compatibility.

Next steps you can take

  • Check Java and GraalVM versions and the vendor's support scope.
  • Update as directed by the advisory and test TLS connections for necessary services.

Original sources

Oracle Security Alert Advisory — CVE-2026-114820

Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.

This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.

Back to news ←