Attackers can execute arbitrary code without authentication if Oracle's Identity or Web Services Managers are exposed to the Web.
Oracle has released version 26 of the Java programming language and virtual machine. As the first non-LTS release since JDK ...