CVE-2026-71156

Oracle Helidon 3.2.19's Imperative Web Server component allows unauthenticated remote attackers to compromise data integrity (CVSS 5.3, MEDIUM). Oracle's August 2026 CPU advisory addresses this; no exploitation details are provided in the documents.