CVE-2026-73897

Oracle Helidon 4.5.0 Imperative Web Server component allows unauthenticated remote attackers via HTTP to read or modify a subset of accessible data; CVSS 6.5 MEDIUM. No exploitation details provided; consult Oracle's August 2026 CPU advisory for patch guidance.