CVE-2026-71166

Oracle Helidon 3.2.18 Imperative Web Server is critically vulnerable (CVSS 9.4) to unauthenticated remote HTTP attacks granting full confidentiality and integrity compromise. Affected component is part of Oracle Fusion Middleware; no patch details or exploitation evidence are provided in the docu...