CVE-2026-101590

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

com.zeroz4j:zerozstack-server-helidon (>=0.4.0, <=0.11.0), io.helidon.microprofile.bundles:helidon-microprofile (>=4.0.0, <=4.5.5) +5 more potentially affected by CVE-2026-101590 via io.helidon.microprofile:helidon-microprofile-security (>=4.0.0, <=4.5.5)

io.helidon.microprofile:helidon-microprofile-security MAVEN version =4.0.0, =0.4.0, =4.0.0, =4.0.0, =4.0.0, =4.0.9, =0.0.1, =0.0.1, =0.0.4 Source cves: CVE-2026-101590 Source advisory: MEND:CVE-2026-101590...

CVE-2026-101590

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

CVE-2026-101590

The Helidon product within Oracle Fusion Middleware (specifically the helidon-microprofile-security component) is affected by a critical vulnerability in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successf...

io.helidon.microprofile.lra:helidon-microprofile-lra-testing (>=4.1.2, <=4.5.5), io.helidon:helidon-all (>=4.0.9, <=4.5.5) potentially affected by CVE-2026-101575 via io.helidon.microprofile.lra:helidon-microprofile-lra (>=4.0.9, <=4.5.5)

io.helidon.microprofile.lra:helidon-microprofile-lra MAVEN version =4.0.9, =4.1.2, =4.0.9, =4.5.5 Source cves: CVE-2026-101575 Source advisory: MEND:CVE-2026-101575...

PT-2026-119270

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.5 Description A flaw in the helidon-microprofile-security component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation c...

Oracle Helidon authorization issue vulnerability

Oracle Helidon versions 4.0.0 to 4.5.5 have an authorization issue vulnerability. This vulnerability stems from issues with the helidon-microprofile-security component. It may allow unauthorized attackers to access through the HTTP network, to create, delete, or modify critical data or all data...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-86248 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.57)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.2.0 Source cves: CVE-2026-86248 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-21246676...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-86248 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.57)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.2.0 Source cves: CVE-2026-86248 Source advisory: MEND:CVE-2026-86248...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-73581 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.57)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.2.0 Source cves: CVE-2026-73581 Source advisory: MEND:CVE-2026-73581...

CVE-2026-83488

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks o...

io.helidon.microprofile.bundles:helidon-microprofile (>=4.1.2, <=4.5.4), io.helidon.microprofile.jwt:helidon-microprofile-jwt-auth (>=4.1.2, <=4.5.4) +2 more potentially affected by CVE-2026-83488 via io.helidon.microprofile:helidon-microprofile-security (>=4.1.2, <=4.5.4)

io.helidon.microprofile:helidon-microprofile-security MAVEN version =4.1.2, =4.1.2, =4.1.2, =4.1.2, =4.1.2, =4.5.4 Source cves: CVE-2026-83488 Source advisory: MEND:CVE-2026-83488...

EUVD-2026-79775

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks o...

CVE-2026-83488

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks o...

CVE-2026-83488

Oracle Fusion Middleware – Helidon (component: helidon-microprofile-security ) versions 4.0.0 through 4.5.4 are affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can achieve unauthorized update, insert, delete, and read access to a subset of d...

io.helidon.microprofile.lra:helidon-microprofile-lra-testing (>=4.1.2, <=4.5.4), io.helidon:helidon-all (>=4.0.9, <=4.5.4) potentially affected by CVE-2026-83460 via io.helidon.lra:helidon-lra-coordinator-narayana-client (>=4.0.9, <=4.5.4)

io.helidon.lra:helidon-lra-coordinator-narayana-client MAVEN version =4.0.9, =4.1.2, =4.0.9, =4.5.4 Source cves: CVE-2026-83460 Source advisory: MEND:CVE-2026-83460...

PT-2026-92943

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.4 Description A flaw in the helidon-microprofile-security component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthoriz...

CVE-2026-83488: Improper Access Control

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks o...

io.antmedia:ant-media-server (>=2.8.0, <=3.0.3), io.github.microsphere-projects:microsphere-spring-cloud-gateway (0.2.0) +18 more potentially affected by CVE-2026-55955 via org.apache.tomcat:tomcat-tribes (>=10.1.0-m1, <=10.1.55)

org.apache.tomcat:tomcat-tribes MAVEN version =10.1.0-m1, =2.8.0, =0.2.2, =10.1.0-m1, =10.1.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.1.5 and more Source cves: CVE-2026-55955 Source advisory: MEND:CVE-2026-559...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-34500 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.52)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.1.4 Source cves: CVE-2026-34500 Source advisory: GHSA-24J9-X2WG-9QV6...