CVE-2026-73904

Oracle Helidon 4.5.1's Imperative Web Server component is vulnerable to an unauthenticated, network-accessible HTTP attack (CVSS 6.5) allowing unauthorized read, insert, update, and delete access to Helidon data. Oracle's August 2026 security alert (cspuaug2026.html) is the sole reference; no roo...