OpenJ9 <=0.60 Misdelegates Abstract Method to Interface Default
CVE-2026-16441 Published on July 21, 2026
Eclipse OpenJ9 : Method resolution default method precedence failure
In Eclipse OpenJ9 versions up to 0.60, when executing class files where a previously concrete superclass method has been recompiled as abstract, execution is incorrectly delegated to an interface default method.
Vulnerability Analysis
CVE-2026-16441 can be exploited with network access. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity and availability.
Weakness Type
Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
The software uses an API function, data structure, or other entity in a way that relies on properties that are not always guaranteed to hold for that entity. This can lead to resultant weaknesses when the required properties change, such as when the software is ported to a different platform or if an interaction error (CWE-435) occurs.
Products Associated with CVE-2026-16441
Want to know whenever a new CVE is published for Eclipse Openj9? stack.watch will email you.
Affected Versions
Eclipse Foundation OpenJ9:- Version 0.8.0 and below 0.60.0 is affected.
- Before 0.8.0 is unaffected.
- Version 0.60.0 is unaffected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.