CVE-2026-73890

CVE-2026-73890 affects the Imperative Web Server component of Oracle Helidon 4.5.0 . An unauthenticated attacker with network access can trigger a complete denial of service (hang or repeatable crash) via crafted HTTP/2 requests. The CVSS 3.1 base score is 7.5 (HIGH) with an availability-only imp...

CVE-2026-73888

...

CVE-2026-73888

CVE-2026-73888 affects Oracle Helidon 4.5.0 (Imperative Web Server component). An unauthenticated attacker with network HTTP access can gain unauthorized read access to a subset of Helidon data (CVSS 5.3, MEDIUM, confidentiality-only impact). Exploitation status is not provided in the documents.{

CVE-2026-73880

CVE-2026-73880 affects Helidon 4.5.1's Imperative Web Server component, allowing a high-privileged local attacker to read critical or all Helidon-accessible data (CVSS 4.4, confidentiality-only). No exploit details, patch version, or root cause are provided in the documents; monitor Oracle's advi...

CVE-2026-73881

Oracle's Helidon 4.5.0 (Imperative Web Server component) is vulnerable to an easily exploitable HTTP-based attack requiring low privileges, allowing unauthorized read, insert, update, and delete access to Helidon data. Oracle's August 2026 CPU advisory (cspuaug2026.html) is the primary reference;...

CVE-2026-73881

...

CVE-2026-73877

...

CVE-2026-73879

Oracle Helidon 4.5.1's Imperative Web Server component is affected by a HIGH severity (CVSS 7.5) unauthenticated, network-reachable integrity vulnerability. No root cause, exploit details, or patch version are provided; monitor Oracle's CSP August 2026 advisory for remediation guidance.

CVE-2026-73876

...

CVE-2026-73870

Oracle Helidon 4.5.0 (Imperative Web Server component) is vulnerable to an unauthenticated, network-reachable exploit requiring human interaction; successful attacks yield unauthorized read/write access to Helidon data with scope change. CVSS 3.1 base score 6.1 (Medium). Remediation details are n...

CVE-2026-73866

...

CVE-2026-73866

Oracle Helidon 4.5.0's Imperative Web Server component contains a critical vulnerability (CVSS 9.1) exploitable by an unauthenticated network attacker via HTTP, granting unauthorized creation, deletion, and modification of all Helidon-accessible data. No patch version, exploit details, or in-the-...

CVE-2026-71165

...

CVE-2026-71154

...

CVE-2026-71132

Oracle VM VirtualBox 7.2.14 (component: Core) is affected by a local, high-complexity vulnerability requiring high privileges, with scope-change effects that can expose all VirtualBox-accessible data. CVSS 3.1 scores it MEDIUM (5.3), confidentiality-only impact. Oracle published security advisory...

CVE-2026-71128

...

CVE-2026-71126

Oracle VM VirtualBox Core component in version 7.2.14 is affected by a HIGH-severity local vulnerability (CVSS 7.8). A low-privileged attacker with infrastructure access can exploit it to compromise the product, with scope change potentially impacting additional products. Oracle's August 2026 sec...

CVE-2026-71120

...

CVE-2026-71119

Oracle HFM Security component in version 11.2.25.0.000 is affected by a local vulnerability exploitable only by a high-privileged attacker with infrastructure access, potentially resulting in full application takeover (CVSS 6.4). No exploit details are provided; Oracle's August 2026 security advi...

CVE-2026-71111

The Installer component of Oracle Identity Manager (versions 12.2.1.4.0 and 14.1.2.1.0) is vulnerable to a local privilege escalation (CVSS 7.8, HIGH) allowing a low-privileged attacker with host access to take over the product. No exploitation details are provided; apply the Oracle August 2026 C...