CVE-2026-73877

An unauthenticated, remotely reachable vulnerability in Oracle Helidon's Imperative Web Server (affected version 3.2.18) allows unauthorized read access to a subset of data. CVSS 3.1 scores it Medium (5.3). Oracle's August 2026 security advisory is referenced as the source. No root-cause or fix d...