Press Release FeedGet the RSS feed
Menu

Business Wire

53 OpenJDK Vulnerabilities Disclosed Today Set an All-Time High; Azul Patches Them All

Business Wire

Azul's Security-only, Stability-first™ updates can be deployed immediately to counter the speed of agentic AI threats

SUNNYVALE, Calif., October 20, 2026--Azul, the trusted leader in enterprise Java for today's AI-first world, today released its October Security-only, Stability-first™ updates for Azul Core that are immediately deployable to address all 53 vulnerabilities disclosed in the latest OpenJDK quarterly update. Azul's Security-only, Stability-first updates contain security fixes and nothing else: no new features, enhancements or unrelated changes that can cause problems. The number of vulnerabilities disclosed in this quarter's OpenJDK release is the most in a single update in well over a decade and 7x greater than the two-year average of 7.6 Common Vulnerabilities and Exposures (CVEs) per quarter.

OpenJDK quarterly updates that include the fixes to these CVEs also include more than 150 code changes unrelated to security. Azul is the only vendor to offer both monthly and quarterly updates scoped to just security fixes. Enterprises can deploy Azul's Security-only, Stability-first updates to production immediately and safely to remediate critical vulnerabilities. Other OpenJDK distributions bundle non-security bug fixes, enhancements and even features in their updates, often causing regressions. While such regressions may get fixed with follow-on updates, they can significantly delay the deployment of urgent security fixes.

AI Is Exposing Flaws and Enabling Exploits Faster than Ever

CSO recently reported that researchers using an AI tool found a 13-year-old remote code execution flaw in Apache ActiveMQ in about 10 minutes. Two weeks after disclosure, nearly 6,500 internet-facing instances were still unpatched. In a case documented by GreyNoise, a suspected attacker used hundreds of AI agents to chain two zero-day flaws in PaperCut NG/MF, going from an empty workspace to remote code execution in under four hours. The agents ultimately reached at least 440 instances across 395 organizations in 48 countries, with full domain administrator control in seven minutes.

Java has been running mission-critical systems for more than 30 years, making it one of the most battle-tested platforms in enterprise computing. But AI is now exposing flaws that survived years of testing and review. Researchers are using it to uncover vulnerabilities in decades-old code, while threat actors use agentic AI to find and exploit them at a speed and scale never seen before. Because the vast majority of enterprises rely on Java for production applications and infrastructure, the impact will be felt in every industry and region. And the risk is immediate, for three reasons:

  1. FinanceNETGEAR®, Inc.NETGEAR Schedules Third Quarter 2026 Results Conference CallSAN JOSE, Calif., October 20, 2026--NETGEAR®, Inc. (NASDAQ: NTGR), a global leader in intelligent networking solutions, today announced that it will hold a conference call with investors and analysts on Wednesday, November 4 at 5:00 p.m. ET (2:00 p.m. PT) to discuss the Company's third quarter 2026 res
  2. FinanceL3Harris TechnologiesL3Harris Opens Next‑Generation Solid Rocket Motor Facility to Boost Production CapacityCompanies: L3Harris TechnologiesL3Harris, joined by federal, state and local officials, opened its newest solid rocket motor factory of the future in Camden, Arkansas. CAMDEN, Ark., October 20, 2026--L3Harris Technologies (NYSE: LHX) joined federal, state and local leaders today to open the new Arsenal of Freedom solid rocket motor p
  3. FinanceNewegg Commerce, Inc.Newegg Closes $100 Million Senior Credit Facility Led by East West BankDIAMOND BAR, Calif., October 20, 2026--Newegg Commerce, Inc. (NASDAQ: NEGG), a leading global technology e-commerce retailer, is pleased to announce the successful closing of a $100 million senior credit facility led and arranged by East West Bank with participation from a syndicate of lenders. This fa
  4. AIOperoOpero Relaunches as a Firm That Designs, Builds, and Operates Custom Business SystemsFounder Travis Ramsey returns to custom software as AI coding tools make bespoke systems a practical alternative to SaaS platforms like Salesforce MIAMI, October 20, 2026--Opero (opero.com) has relaunched as a services firm that designs, builds, and operates custom business systems that replace SaaS pl
  5. FinanceMesa Royalty TrustMesa Royalty Trust Announces There Will Be No Distribution for October 2026HOUSTON, October 20, 2026--Mesa Royalty Trust (the "Trust") (NYSE symbol-MTR) announced today that there will be no distribution paid for the month of October 2026, as costs, charges and expenses attributable to the Trust's royalty properties exceeded the revenue received from the sale of oil, natural
  6. HealthcareZoetis Inc.Zoetis Receives FDA Approval for Convenia® RTU for Dogs (cefovecin injectable suspension), Helping More Medium and Large Dogs Access Single-Injection TreatmentCompanies: ZoetisConvenia RTU for Dogs can provide up to 14 days of antibiotic treatment of susceptible bacterial skin infections in dogs in a single injection by a veterinary professional Pyoderma – a bacterial skin infection—is one of the top 5 reasons for vet visits for dogs.1 Administration at the veterinary clinic helps dog owners av