CVE-2026-73928

Oracle Helidon 4.5.3 Imperative Web Server component is vulnerable to unauthenticated remote HTTP attacks (CVSS 7.2) allowing unauthorized read/write access to accessible data with scope change; no exploitation details are provided. Oracle has released patches via the August 2026 CPU advisory.

CVE-2026-73915

...

CVE-2026-73900

...

CVE-2026-73894

...

CVE-2026-73890

CVE-2026-73890 affects the Imperative Web Server component of Oracle Helidon 4.5.0 . An unauthenticated attacker with network access can trigger a complete denial of service (hang or repeatable crash) via crafted HTTP/2 requests. The CVSS 3.1 base score is 7.5 (HIGH) with an availability-only imp...

CVE-2026-73888

...

CVE-2026-73883

...

CVE-2026-73877

...

CVE-2026-73874

Oracle Helidon 4.5.0's Imperative Web Server component is vulnerable to an easily exploitable HTTP-based attack requiring low privileges, yielding unauthorized read/write access to Helidon data (CVSS 5.4 Medium). Patch status and affected versions beyond 4.5.0 are not provided in the documents. M...

CVE-2026-73870

Oracle Helidon 4.5.0 (Imperative Web Server component) is vulnerable to an unauthenticated, network-reachable exploit requiring human interaction; successful attacks yield unauthorized read/write access to Helidon data with scope change. CVSS 3.1 base score 6.1 (Medium). Remediation details are n...

CVE-2026-73866

Oracle Helidon 4.5.0's Imperative Web Server component contains a critical vulnerability (CVSS 9.1) exploitable by an unauthenticated network attacker via HTTP, granting unauthorized creation, deletion, and modification of all Helidon-accessible data. No patch version, exploit details, or in-the-...

CVE-2026-71165

...

CVE-2026-71166

...

CVE-2026-71151

...

CVE-2026-71144

Oracle Hyperion Financial Management version 11.2.25.0.000 has a local Security component vulnerability exploitable only by a high-privileged attacker with infrastructure logon access. Successful exploitation allows unauthorized read and limited update/insert/delete access to accessible data; ava...

CVE-2026-71137

Oracle VM VirtualBox Core component in version 7.2.14 is affected by an easily exploitable vulnerability (CVSS 6.0) that allows a high-privileged local attacker to cause a hang or crash (availability impact). Exploitation details are not provided in the documents. No patch version or workaround i...

CVE-2026-71135

...

CVE-2026-71130

...

CVE-2026-71125

...

CVE-2026-71119

Oracle HFM Security component in version 11.2.25.0.000 is affected by a local vulnerability exploitable only by a high-privileged attacker with infrastructure access, potentially resulting in full application takeover (CVSS 6.4). No exploit details are provided; Oracle's August 2026 security advi...