CVE-2026-71160

...

CVE-2026-71160

CVE-2026-71160 affects Oracle Helidon 3.2.18 (Imperative Web Server component). A network-accessible, low-privileged attacker can exploit it via HTTP to fully compromise Helidon (HIGH severity, CVSS 7.5). The Oracle CPUP August 2026 advisory is the patch reference; no exploit details are provided...