CVE-2026-71074

Oracle Helidon 3.2.18 (Imperative Web Server component) has a critical unauthenticated HTTP-exploitable flaw allowing full takeover. No root cause or patch version is provided; the Oracle CSP August 2026 advisory is the sole reference. No exploit details are available. Upgrade to a patched Helido...