CVE-2026-73895

Oracle Helidon 3.2.18's Imperative Web Server component is vulnerable; an unauthenticated, network-accessible attacker can exploit it via HTTP to gain unauthorized read access to a subset of Helidon data (CVSS 5.3, Medium). No exploitation details are provided; see Oracle's CSP advisory for patch...