26.02.500.0
26.02.500.0
Release date: October 20, 2026
This CPU release is based on the Azul Zing Build of OpenJDK (Zing) 26.02.400.0 and corresponds to the following OpenJDK versions:
| Major Version |
Corresponding OpenJDK Version |
Based on Zing Version |
Based on OpenJDK Version |
|---|---|---|---|
8 |
1.8.0_511-b2 |
26.02.400.0 |
1.8.0_504-b4 |
11 |
11.0.32.1.101+1-LTS |
26.02.400.0 |
11.0.32.1+1-LTS |
17 |
17.0.20.1.101+1-LTS |
26.02.400.0 |
17.0.20.1+1-LTS |
21 |
21.0.12.1.101+1-LTS |
26.02.400.0 |
21.0.12.1+1-LTS |
25 |
25.0.4.1.101+1-LTS |
26.02.400.0 |
25.0.4.1+1-LTS |
What’s New
-
October 2026 CPU release security fixes.
CVE fixes
| CVE # | Component | Protocol | Remote Exploit w/o Auth. | Base Score | Attack Vector | Attack Complex | Privileges Req’d | User Interact | Scope | Confiden-tiality | Integrity | Availability | Versions Affected | Notes |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
CVE-2026-XXXXX This CVE is not applicable to Azul Zing Builds of OpenJDK. It is listed here for comparison with other Java implementations which may contain this CVE. |
None |
None |
No |
0 |
Local |
Low |
Low |
None |
Unchanged |
High |
High |
High |
None |
Note 1 |
Notes:
| ID | Notes |
|---|---|
1 |
Note 1 |
For more information about CVE and non-CVE security fixes in this release, refer to Common Vulnerabilities and Exposures Fixes for October 2026