CVE-2026-73868

Helidon 4.5.0's Imperative Web Server component is vulnerable to an unauthenticated, network-based HTTP attack (CVSS 6.5) enabling unauthorized read/write access to Helidon data. Exploitation details are not provided in the documents. Oracle's August 2026 security advisory (cspuaug2026.html ) add...