Oracle’s CVE-2026-91403 alert stops Java SE and GraalVM trusting eight compromised eMudhra intermediate CA certificates.
TL;DR Sonatype's tests found that Java's blocked.certs rejected the listed certificate encodings but accepted re-encoded ...