CVE-2026-73892

Oracle Helidon 4.5.0's Imperative Web Server component is vulnerable to an unauthenticated, network-accessible HTTP attack (CVSS 6.5 Medium) that grants unauthorized read and write access to some Helidon data. No exploit details are provided; consult Oracle's CSP August 2026 advisory for patch in...