CVE-2026-73896

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of thi...

CVE-2026-73896

Helidon 4.5.0's Imperative Web Server component is vulnerable to an unauthenticated HTTP/2 attack. CVSS 6.5 (Medium) reflects low confidentiality impact (partial data read) and low availability impact (partial DoS). The Oracle August 2026 security alert is the primary reference. No patch version ...

CVE-2026-73896

...