CVE-2026-70727

Oracle Helidon 3.2.18's Imperative Web Server component has a network-exploitable vulnerability (CVSS 5.3) allowing unauthenticated attackers to read a subset of accessible data via HTTPS. Details are in Oracle's August 2026 CPU advisory; monitor for the patch release and upgrade to the fixed ver...