EUVD-2026-105998

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

CVE-2026-101590

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

CVE-2026-101590

The Helidon product within Oracle Fusion Middleware (specifically the helidon-microprofile-security component) is affected by a critical vulnerability in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successf...

PT-2026-119270

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.5 Description A flaw in the helidon-microprofile-security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation c...

CVE-2026-83488

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks o...

EUVD-2026-79775

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks o...

CVE-2026-83488

Oracle Fusion Middleware – Helidon (component: helidon-microprofile-security ) versions 4.0.0 through 4.5.4 are affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can achieve unauthorized update, insert, delete, and read access to a subset of d...

io.helidon.microprofile.bundles:helidon-microprofile (>=4.1.2, <=4.5.4), io.helidon.microprofile.jwt:helidon-microprofile-jwt-auth (>=4.1.2, <=4.5.4) +2 more potentially affected by CVE-2026-83488 via io.helidon.microprofile:helidon-microprofile-security (>=4.1.2, <=4.5.4)

io.helidon.microprofile:helidon-microprofile-security MAVEN version =4.1.2, =4.1.2, =4.1.2, =4.1.2, =4.1.2, =4.5.4 Source cves: CVE-2026-83488 Source advisory: MEND:CVE-2026-83488...

PT-2026-92943

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.4 Description A flaw in the helidon-microprofile-security component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthoriz...

CVE-2026-83488: Improper Access Control

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks o...