CVE-2026-71157

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

CVE-2026-71157

CVE-2026-71157 affects Oracle Helidon 4.5.0 , specifically the Imperative Web Server component. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of Helidon-accessible data. The CVSS 3.1 base score is 5.3 (Medium) ...

CVE-2026-71157

...