CVE-2026-101584

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-websocket. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

CVE-2026-101582

The Helidon product of Oracle Fusion Middleware (specifically the helidon-integrations-vault component) is vulnerable in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this flaw to achieve unauthorized read access to a subset of Helidon accessible data...

CVE-2026-101583

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-common-mapper. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

CVE-2026-101583

A vulnerability exists in the helidon-common-mapper component of the Oracle Fusion Middleware Helidon product, specifically affecting versions 4.0.0-4.5.5 and 27.0.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Succ...

CVE-2026-101579

The helidon-grpc-server component within the Helidon product of Oracle Fusion Middleware is affected by a vulnerability in versions 3.0.0-3.2.21 . An unauthenticated attacker with network access via HTTP/2 can easily exploit this issue to compromise the system. Successful exploitation may lead to...

CVE-2026-101580

A vulnerability exists in the helidon-security-providers-jwt component of the Oracle Fusion Middleware Helidon product. Affected versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a ...

CVE-2026-101576

The Helidon product of Oracle Fusion Middleware (specifically the LRA component) is affected by a vulnerability in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of Helidon accessible data...

CVE-2026-101578

A vulnerability exists in the Helidon product of Oracle Fusion Middleware, specifically within the helidon-security-providers-google-login component. Affected versions include 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorize...

CVE-2026-101577

A vulnerability exists in the helidon-cors component of the Oracle Fusion Middleware Helidon product, affecting supported versions 4.0.0-4.5.5 . This high-complexity vulnerability allows an unauthenticated attacker with HTTP network access to compromise Helidon, provided that human interaction fr...

CVE-2026-101575

Vulnerability in the Helidon product of Oracle Fusion Middleware component: LRA. Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon,...

CVE-2026-101574

A vulnerability exists in the OIDC component of the Helidon product within Oracle Fusion Middleware (affected versions 4.0.0-4.5.5 and 27.0.0 ). An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability, which requires human interaction , to compromis...

CVE-2026-101573

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-security-providers-http-auth component. Affected versions include 3.0.0-3.2.21 , 4.0.0-4.5.5 , and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this difficult to exploit ...

CVE-2026-101575

A vulnerability exists in the Helidon product of Oracle Fusion Middleware (component: LRA ) affecting versions 4.0.0-4.5.5 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Helidon, which may significantly impact additional pro...

CVE-2026-101572

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http2. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful...

CVE-2026-101572

A vulnerability exists in the helidon-webclient-http2 component of the Helidon product within Oracle Fusion Middleware, affecting versions 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP/2 can exploit this flaw to cause a hang or frequently repeatable crash , lea...

CVE-2026-101569

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-common-concurrency-limits. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon...

CVE-2026-101569

A vulnerability exists in the helidon-common-concurrency-limits component of the Helidon product within Oracle Fusion Middleware . Affected versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to gain unauthorized update, ...

CVE-2026-101568

A vulnerability exists in the helidon-health component of the Oracle Fusion Middleware Helidon product. Affected versions include 3.0.0-3.2.21 , 4.0.0-4.5.5 , and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset o...

com.akilisha.oss:cafeai-agentic (>=0.5.0, <=0.6.0), com.akilisha.oss:cafeai-agents (>=0.2.0, <=0.4.0) +87 more potentially affected by CVE-2026-101570 via io.helidon.http:helidon-http-http2 (>=4.0.0-m2, <=4.5.5)

io.helidon.http:helidon-http-http2 MAVEN version =4.0.0-m2, =0.5.0, =0.2.0, =0.5.0, =0.4.0, =0.1.2, =0.1.2, =0.5.0, =0.1.2, =0.1.2, =0.6.0 - com.akilisha.oss:cafeai-mustache 0.6.0 and more Source cves: CVE-2026-101570 Source advisory: MEND:CVE-2026-101570...

CVE-2026-101570

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...