EUVD-2026-105980

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http2. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful...

CVE-2026-101572

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http2. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful...

io.helidon.webclient:helidon-webclient-grpc (>=27.0.0-m1, <=27.0.0), io.helidon.webclient:helidon-webclient-grpc-tracing (>=27.0.0-m1, <=27.0.0) +3 more potentially affected by CVE-2026-101572 via io.helidon.webclient:helidon-webclient-http2 (>=27.0.0-m1, <=27.0.0)

io.helidon.webclient:helidon-webclient-http2 MAVEN version =27.0.0-m1, =27.0.0-m1, =27.0.0-m1, =27.0.0-m1, =27.0.0-m1, =27.0.0-m1, =27.0.0 Source cves: CVE-2026-101572 Source advisory: MEND:CVE-2026-101572...

com.hedera.pbj:pbj-grpc-client-helidon (>=0.11.8, <=0.16.3), com.oracle.coherence.ce:coherence-grpc-client-helidon (>=24.09, <=25.03.2) +36 more potentially affected by CVE-2026-101572 via io.helidon.webclient:helidon-webclient-http2 (>=4.0.0-m2, <=4.5.5)

io.helidon.webclient:helidon-webclient-http2 MAVEN version =4.0.0-m2, =0.11.8, =24.09, =0.11, =0.11, =0.11, =0.11, =0.11, =4.2.0, =4.0.0-rc1, =4.1.1, =4.1.0, =4.2.4, =4.1.0, =4.5.5 and more Source cves: CVE-2026-101572 Source advisory: MEND:CVE-2026-101572...

CVE-2026-101572

A vulnerability exists in the helidon-webclient-http2 component of the Helidon product within Oracle Fusion Middleware, affecting versions 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP/2 can exploit this flaw to cause a hang or frequently repeatable crash , lea...

CVE-2026-101572

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http2. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful...

PT-2026-119252

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http2. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful...

Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 4.0.0 through 4.5.5 and 27.0.0. These stem from issues in the helidon-webclient-http2 component and may allow unauthenticated attackers to access the service via HTTP/2 networks, potentially leading to service hangs or frequent crashes...

CVE-2026-83276

CVE-2026-83276 affects the helidon-webclient-http2 component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP/2 can trigger a hang or frequently repeatable crash, resulting in a complete denial of service...

CVE-2026-83276: Uncontrolled Resource Consumption

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http2. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

PT-2026-92798

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.4 Description A flaw in the helidon-webclient-http2 component allows an unauthenticated attacker with network access via HTTP/2 to compromise the system. This can lead to a hang or a...