CVE-2026-101590

The Helidon product within Oracle Fusion Middleware (specifically the helidon-microprofile-security component) is affected by a critical vulnerability in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successf...

CVE-2026-101589

The Oracle Utilities Network Management System product (component: System Wide ) is affected by a vulnerability in versions 2.6.0.1.0-2.6.0.1.12 , 2.6.0.2.0-2.6.0.2.10 , and 25.12.0.0.0-25.12.0.0.2 . An unauthenticated attacker with network access via HTTPS can exploit this issue to gain unauthor...

CVE-2026-101588

A vulnerability exists in the WebSocket component of the Helidon product within Oracle Fusion Middleware . Affected versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise Helidon, potentially resulting in unaut...

CVE-2026-101586

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-webclient component. Impacted versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset of Heli...

CVE-2026-101585

The Helidon product within Oracle Fusion Middleware (specifically the helidon-cors component) is affected by a vulnerability in versions 3.0.0-3.2.21 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise Helidon, potentially gaining unauthorized read, upda...

CVE-2026-101582

The Helidon product of Oracle Fusion Middleware (specifically the helidon-integrations-vault component) is vulnerable in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this flaw to achieve unauthorized read access to a subset of Helidon accessible data...

CVE-2026-101581

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-webclient-dns-resolver-round-robin component. This issue impacts supported versions 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via DNS can exploit this vulnerability to comp...

CVE-2026-101579

The helidon-grpc-server component within the Helidon product of Oracle Fusion Middleware is affected by a vulnerability in versions 3.0.0-3.2.21 . An unauthenticated attacker with network access via HTTP/2 can easily exploit this issue to compromise the system. Successful exploitation may lead to...

CVE-2026-101580

A vulnerability exists in the helidon-security-providers-jwt component of the Oracle Fusion Middleware Helidon product. Affected versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a ...

CVE-2026-101577

A vulnerability exists in the helidon-cors component of the Oracle Fusion Middleware Helidon product, affecting supported versions 4.0.0-4.5.5 . This high-complexity vulnerability allows an unauthenticated attacker with HTTP network access to compromise Helidon, provided that human interaction fr...

CVE-2026-101578

A vulnerability exists in the Helidon product of Oracle Fusion Middleware, specifically within the helidon-security-providers-google-login component. Affected versions include 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorize...

CVE-2026-101576

The Helidon product of Oracle Fusion Middleware (specifically the LRA component) is affected by a vulnerability in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of Helidon accessible data...

CVE-2026-101574

A vulnerability exists in the OIDC component of the Helidon product within Oracle Fusion Middleware (affected versions 4.0.0-4.5.5 and 27.0.0 ). An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability, which requires human interaction , to compromis...

CVE-2026-101573

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-security-providers-http-auth component. Affected versions include 3.0.0-3.2.21 , 4.0.0-4.5.5 , and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult to exploit ...

CVE-2026-101571

A vulnerability exists in the helidon-security-providers-idcs-mapper component of the Helidon product within Oracle Fusion Middleware . Affected versions include 3.0.0-3.2.21 and 4.0.0-4.5.5 . A low-privileged attacker with local infrastructure access can exploit this difficult-to-execute vulnera...

CVE-2026-101568

A vulnerability exists in the helidon-health component of the Oracle Fusion Middleware Helidon product. Affected versions include 3.0.0-3.2.21 , 4.0.0-4.5.5 , and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset o...

CVE-2026-101565

A vulnerability exists in the Import component of Oracle Agile PLM (Oracle Supply Chain), specifically affecting version 9.3.6 . An unauthenticated attacker with access to the underlying infrastructure can exploit this vulnerability to compromise the application. Successful exploitation may lead ...

CVE-2026-101562

A vulnerability exists in the Acollect component of Oracle Agile PLM (Oracle Supply Chain) version 2.6 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized access to critical data or co...

CVE-2026-101564

The Oracle Agile PLM product (Oracle Supply Chain) is affected by a vulnerability in the Acollect component, specifically in version 2.6 . An unauthenticated attacker with network access via TLS can exploit this difficult-to-exploit vulnerability to compromise the system. Successful exploitation ...

CVE-2026-101560

The Oracle Commerce Platform (component: Dynamo Commerce Server ) is affected by a vulnerability in version 11.4.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the platform. Successful exploitation may lead to unauthorized creation, deletion,...