CVE-2026-73896

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this...

CVE-2026-73896

Helidon 4.5.0's Imperative Web Server component is vulnerable to an unauthenticated HTTP/2 attack. CVSS 6.5 (Medium) reflects low confidentiality impact (partial data read) and low availability impact (partial DoS). The Oracle August 2026 security alert is the primary reference. No patch version ...

CVE-2026-73896

...