CVE-2026-73925

...

CVE-2026-73918

Oracle Helidon 4.5.0's Imperative Web Server component has an unauthenticated, network-accessible HTTP vulnerability (CVSS 7.3 High) allowing data read/write and partial DoS; no patch version or exploit details are provided in the documents.

CVE-2026-73919

Oracle Helidon 3.2.18's Imperative Web Server component is vulnerable to a network-exploitable issue (CVSS 5.4, MEDIUM) allowing low-privileged HTTP attackers to gain unauthorized read and write access to Helidon-accessible data. No root cause, exploit details, or patch version are provided; refe...

CVE-2026-73909

Helidon 3.2.19 (Oracle Fusion Middleware) is affected in its Imperative Web Server component. A difficult-to-exploit, unauthenticated, network-based HTTP attack can grant an attacker unauthorized access to critical or all Helidon-accessible data. CVSS 3.1 scores this 5.9 (Medium) with high confid...

CVE-2026-73910

...

CVE-2026-73906

CVE-2026-73906 affects the Imperative Web Server component of Oracle Helidon (version 4.5.0 ), part of Oracle Fusion Middleware. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of Helidon-accessible data. The CVS...

CVE-2026-73905

...

CVE-2026-73904

...

CVE-2026-73897

...

CVE-2026-73893

...

CVE-2026-73894

...

CVE-2026-73889

...

CVE-2026-73890

CVE-2026-73890 affects the Imperative Web Server component of Oracle Helidon 4.5.0 . An unauthenticated attacker with network access can trigger a complete denial of service (hang or repeatable crash) via crafted HTTP/2 requests. The CVSS 3.1 base score is 7.5 (HIGH) with an availability-only imp...

CVE-2026-73888

CVE-2026-73888 affects Oracle Helidon 4.5.0 (Imperative Web Server component). An unauthenticated attacker with network HTTP access can gain unauthorized read access to a subset of Helidon data (CVSS 5.3, MEDIUM, confidentiality-only impact). Exploitation status is not provided in the documents.{

CVE-2026-73888

...

CVE-2026-73881

Oracle's Helidon 4.5.0 (Imperative Web Server component) is vulnerable to an easily exploitable HTTP-based attack requiring low privileges, allowing unauthorized read, insert, update, and delete access to Helidon data. Oracle's August 2026 CPU advisory (cspuaug2026.html) is the primary reference;...

CVE-2026-73880

CVE-2026-73880 affects Helidon 4.5.1's Imperative Web Server component, allowing a high-privileged local attacker to read critical or all Helidon-accessible data (CVSS 4.4, confidentiality-only). No exploit details, patch version, or root cause are provided in the documents; monitor Oracle's advi...

CVE-2026-73881

...

CVE-2026-73877

...

CVE-2026-73879

Oracle Helidon 4.5.1's Imperative Web Server component is affected by a HIGH severity (CVSS 7.5) unauthenticated, network-reachable integrity vulnerability. No root cause, exploit details, or patch version are provided; monitor Oracle's CSP August 2026 advisory for remediation guidance.