CVE-2026-71165

Oracle Helidon 3.2.18's Imperative Web Server component is vulnerable to a CVSS 5.4 medium-severity flaw: an authenticated low-privilege network attacker can exploit it via HTTP to gain unauthorized read and write access to Helidon data. No exploit code or in-the-wild exploitation details are pro...

CVE-2026-71165

...