30918 matches found
CVE-2026-73890
Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this...
CVE-2026-73887
...
CVE-2026-73888
...
CVE-2026-73885
...
CVE-2026-73880
CVE-2026-73880 affects Helidon 4.5.1's Imperative Web Server component, allowing a high-privileged local attacker to read critical or all Helidon-accessible data (CVSS 4.4, confidentiality-only). No exploit details, patch version, or root cause are provided in the documents; monitor Oracle's advi...
CVE-2026-73881
Oracle's Helidon 4.5.0 (Imperative Web Server component) is vulnerable to an easily exploitable HTTP-based attack requiring low privileges, allowing unauthorized read, insert, update, and delete access to Helidon data. Oracle's August 2026 CPU advisory (cspuaug2026.html) is the primary reference;...
CVE-2026-73882
...
CVE-2026-73877
...
CVE-2026-73874
Oracle Helidon 4.5.0's Imperative Web Server component is vulnerable to an easily exploitable HTTP-based attack requiring low privileges, yielding unauthorized read/write access to Helidon data (CVSS 5.4 Medium). Patch status and affected versions beyond 4.5.0 are not provided in the documents. M...
CVE-2026-73873
CVE-2026-73873 affects Helidon 3.2.18 (Imperative Web Server component), allowing a low-privileged remote attacker to read and modify a subset of Helidon data via HTTP. CVSS 4.2 (Medium) reflects high attack complexity. Oracle's CSPR August 2026 advisory is the primary reference; no patch version...
CVE-2026-73870
...
CVE-2026-73870
Oracle Helidon 4.5.0 (Imperative Web Server component) is vulnerable to an unauthenticated, network-reachable exploit requiring human interaction; successful attacks yield unauthorized read/write access to Helidon data with scope change. CVSS 3.1 base score 6.1 (Medium). Remediation details are n...
CVE-2026-73866
...
CVE-2026-73866
Oracle Helidon 4.5.0's Imperative Web Server component contains a critical vulnerability (CVSS 9.1) exploitable by an unauthenticated network attacker via HTTP, granting unauthorized creation, deletion, and modification of all Helidon-accessible data. No patch version, exploit details, or in-the-...
CVE-2026-71165
Oracle Helidon 3.2.18's Imperative Web Server component is vulnerable to a CVSS 5.4 medium-severity flaw: an authenticated low-privilege network attacker can exploit it via HTTP to gain unauthorized read and write access to Helidon data. No exploit code or in-the-wild exploitation details are pro...
CVE-2026-71165
...
CVE-2026-71166
...
CVE-2026-71154
...