EUVD-2026-105992

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-websocket. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

EUVD-2026-105994

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks o...

EUVD-2026-105995

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http1. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

EUVD-2026-105989

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-dns-resolver-round-robin. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise...

EUVD-2026-105980

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http2. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful...

CVE-2026-101586

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks o...

CVE-2026-101587

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http1. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

CVE-2026-101581

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-dns-resolver-round-robin. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise...

CVE-2026-101584

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-websocket. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

CVE-2026-101572

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http2. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful...

CVE-2026-101587

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http1. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

io.helidon.bundles:helidon-bundles-security (>=27.0.0-m1, <=27.0.0), io.helidon.extensions.eureka:helidon-extensions-eureka (27.0.0) +41 more potentially affected by CVE-2026-101587 via io.helidon.webclient:helidon-webclient-http1 (>=27.0.0-m1, <=27.0.0)

io.helidon.webclient:helidon-webclient-http1 MAVEN version =27.0.0-m1, =27.0.0-m1, =27.0.0 - io.helidon.extensions.eureka:helidon-extensions-eureka 27.0.0 - io.helidon.extensions.eureka:helidon-extensions-eureka-discovery 27.0.0 -...

com.hedera.pbj:pbj-grpc-client-helidon (>=0.11.8, <=0.16.3), com.open-elements:recordstore-server (>=0.1.0, <=0.10.0) +106 more potentially affected by CVE-2026-101587 via io.helidon.webclient:helidon-webclient-http1 (>=4.0.0-m2, <=4.5.5)

io.helidon.webclient:helidon-webclient-http1 MAVEN version =4.0.0-m2, =0.11.8, =0.1.0, =24.09, =0.4.0, =0.3.10, =3.2.3, =3.2.3, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =2.8.0, =0.11, =0.30 and more Source cves: CVE-2026-101587 Source advisory: MEND:CVE-2026-101587...

CVE-2026-101586

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-webclient component. Impacted versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset of Heli...

CVE-2026-101587

A vulnerability exists in the helidon-webclient-http1 component of the Helidon product within Oracle Fusion Middleware . The affected versions are 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to cause a partial denial of service (partial ...

CVE-2026-101584

The Helidon product of Oracle Fusion Middleware is vulnerable in the helidon-webclient-websocket component. Specifically, supported versions 4.0.0-4.5.5 and 27.0.0 are affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the system. Succes...

io.helidon:helidon-all (>=4.0.9, <=4.5.5) potentially affected by CVE-2026-101581 via io.helidon.webclient.dns.resolver:helidon-webclient-dns-resolver-round-robin (>=4.0.9, <=4.5.5)

io.helidon.webclient.dns.resolver:helidon-webclient-dns-resolver-round-robin MAVEN version =4.0.9, =4.0.9, =4.5.5 Source cves: CVE-2026-101581 Source advisory: MEND:CVE-2026-101581...

io.helidon:helidon-all (>=27.0.0-m1, <=27.0.0) potentially affected by CVE-2026-101581 via io.helidon.webclient.dns.resolver:helidon-webclient-dns-resolver-round-robin (>=27.0.0-m1, <=27.0.0)

io.helidon.webclient.dns.resolver:helidon-webclient-dns-resolver-round-robin MAVEN version =27.0.0-m1, =27.0.0-m1, =27.0.0 Source cves: CVE-2026-101581 Source advisory: MEND:CVE-2026-101581...

CVE-2026-101581

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-webclient-dns-resolver-round-robin component. This issue impacts supported versions 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via DNS can exploit this vulnerability to comp...

CVE-2026-101581

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-dns-resolver-round-robin. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise...