CVE-2026-71167

creationtimestamp| type| source ---|---|--- 2026-08-18 22:27:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfb7webif2m 2026-08-19 09:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgga7evwi2t 2026-08-19 17:17:04+00:00| seen|...

CVE-2026-71167

...

CVE-2026-71167

...

CVE-2026-71167

Helidon 4.5.0's Imperative Web Server component is critically vulnerable (CVSS 9.4) to unauthenticated, remote HTTP attacks allowing full data compromise and partial DoS. No public exploit or root-cause details are provided; Oracle has released patches per its August 2026 CPU advisory.