CVE-2026-73907

Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...

CVE-2026-73907

CVE-2026-73907 affects Oracle Helidon 3.2.18 in the Imperative Web Server component. An unauthenticated remote attacker can exploit it via HTTP to access all Helidon-accessible data (CVSS 7.5, HIGH). No exploit code or in-the-wild exploitation is documented. See Oracle's CSP August 2026 advisory ...

CVE-2026-73907

...