Oracle’s Emergency Java Fix Cuts eMudhra’s Weak Certificates Loose
Oracle's out-of-band CVE-2026-91403 fix (CVSS 9.1) stops Java trusting eight eMudhra intermediate certificates with weak keys; a second update, CVE-2026-114820, removes the related roots.