CVE-2026-101576

The Helidon product of Oracle Fusion Middleware (specifically the LRA component) is affected by a vulnerability in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of Helidon accessible data...

CVE-2026-101578

A vulnerability exists in the Helidon product of Oracle Fusion Middleware, specifically within the helidon-security-providers-google-login component. Affected versions include 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorize...

CVE-2026-101577

A vulnerability exists in the helidon-cors component of the Oracle Fusion Middleware Helidon product, affecting supported versions 4.0.0-4.5.5 . This high-complexity vulnerability allows an unauthenticated attacker with HTTP network access to compromise Helidon, provided that human interaction fr...

CVE-2026-101575

Vulnerability in the Helidon product of Oracle Fusion Middleware component: LRA. Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon,...

CVE-2026-101573

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-security-providers-http-auth component. Affected versions include 3.0.0-3.2.21 , 4.0.0-4.5.5 , and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult to exploit ...

CVE-2026-101574

A vulnerability exists in the OIDC component of the Helidon product within Oracle Fusion Middleware (affected versions 4.0.0-4.5.5 and 27.0.0 ). An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability, which requires human interaction , to compromis...

CVE-2026-101575

A vulnerability exists in the Helidon product of Oracle Fusion Middleware (component: LRA ) affecting versions 4.0.0-4.5.5 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Helidon, which may significantly impact additional pro...

CVE-2026-101572

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http2. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful...

CVE-2026-101572

A vulnerability exists in the helidon-webclient-http2 component of the Helidon product within Oracle Fusion Middleware, affecting versions 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP/2 can exploit this flaw to cause a hang or frequently repeatable crash , lea...

CVE-2026-101569

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-common-concurrency-limits. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon...

com.akilisha.oss:cafeai-agentic (>=0.5.0, <=0.6.0), com.akilisha.oss:cafeai-agents (>=0.2.0, <=0.4.0) +87 more potentially affected by CVE-2026-101570 via io.helidon.http:helidon-http-http2 (>=4.0.0-m2, <=4.5.5)

io.helidon.http:helidon-http-http2 MAVEN version =4.0.0-m2, =0.5.0, =0.2.0, =0.5.0, =0.4.0, =0.1.2, =0.1.2, =0.5.0, =0.1.2, =0.1.2, =0.6.0 - com.akilisha.oss:cafeai-mustache 0.6.0 and more Source cves: CVE-2026-101570 Source advisory: MEND:CVE-2026-101570...

CVE-2026-101568

A vulnerability exists in the helidon-health component of the Oracle Fusion Middleware Helidon product. Affected versions include 3.0.0-3.2.21 , 4.0.0-4.5.5 , and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset o...

CVE-2026-101569

A vulnerability exists in the helidon-common-concurrency-limits component of the Helidon product within Oracle Fusion Middleware . Affected versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to gain unauthorized update, ...

CVE-2026-101570

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

CVE-2026-101570

A vulnerability exists in the helidon-webserver-http2 component of the Helidon product within Oracle Fusion Middleware . Affected versions range from 4.0.0 to 4.5.5 . An unauthenticated attacker with network access via HTTP/2 can exploit this difficulty-to-exploit vulnerability to cause a partial...

CVE-2026-101567

The Oracle Cost Management product, specifically within the Cost Planning component of Oracle E-Business Suite (versions 12.2.3-12.2.15 ), contains a vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system. A successful attack can result in a take...

CVE-2026-101562

A vulnerability exists in the Acollect component of Oracle Agile PLM (Oracle Supply Chain) version 2.6 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may result in unauthorized access to critical data or co...

CVE-2026-101558

The Oracle Purchasing product within Oracle E-Business Suite (specifically the Approvals component) is vulnerable in versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, which requires human interaction, to compromise the product. Succ...

CVE-2026-101559

A vulnerability exists in the Oracle Purchasing product of Oracle E-Business Suite , specifically within the PO View Document component. Affected versions range from 12.2.3 to 12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to compromise Oracle Purc...

CVE-2026-101560

The Oracle Commerce Platform (component: Dynamo Commerce Server ) is affected by a vulnerability in version 11.4.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the platform. Successful exploitation may lead to unauthorized creation, deletion,...