CVE-2026-71154

Oracle Helidon 4.5.0's Imperative Web Server component has a medium-severity (CVSS 6.1) local privilege escalation flaw. A low-privileged attacker with host-level access can exploit it to read all Helidon-accessible data and perform unauthorized insert/update/delete operations. Exploitation requi...