CVE-2026-73939

creationtimestamp| type| source ---|---|--- 2026-08-18 22:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtf7pf2n2s2r 2026-08-19 17:16:38+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 11:07:06+00:00| seen|...

MINI-48FF-R269-WH9X

Bulletin has no description...

CVE-2026-73937

...

CVE-2026-73934

Helidon 3.2.19's Imperative Web Server component is vulnerable to an unauthenticated HTTP/2 attack causing denial of service via hang or crash (CVSS 7.5). No exploitation details are provided. Affected organizations should apply patches from Oracle's August 2026 CPU advisory.

CVE-2026-73933

...

CVE-2026-73931

...

CVE-2026-73927

...

CVE-2026-73928

Oracle Helidon 4.5.3 Imperative Web Server component is vulnerable to unauthenticated remote HTTP attacks (CVSS 7.2) allowing unauthorized read/write access to accessible data with scope change; no exploitation details are provided. Oracle has released patches via the August 2026 CPU advisory.

CVE-2026-73925

...

CVE-2026-73920

CVE-2026-73920 affects Oracle Helidon 4.5.0 (Imperative Web Server component), rated Critical (CVSS 9.4). An unauthenticated remote attacker can exploit it over HTTP to compromise confidentiality and integrity of all accessible data, with partial DoS impact. No root cause, exploit, or patch detai...

CVE-2026-73918

Oracle Helidon 4.5.0's Imperative Web Server component has an unauthenticated, network-accessible HTTP vulnerability (CVSS 7.3 High) allowing data read/write and partial DoS; no patch version or exploit details are provided in the documents.

CVE-2026-73914

Affected: Oracle Helidon 4.5.0, Imperative Web Server component. Unauthenticated network attacker can read subset of data and cause partial DoS (CVSS 6.5). No exploitation details provided; patch version not specified in documents.

CVE-2026-73916

...

CVE-2026-73915

...

CVE-2026-73916

Helidon 3.2.18 (Oracle Fusion Middleware, Imperative Web Server component) is affected by a critical vulnerability (CVSS 9.1) exploitable by an unauthenticated attacker over HTTP, granting unauthorized access to all Helidon-accessible data and enabling creation, deletion, or modification of criti...

CVE-2026-73909

Helidon 3.2.19 (Oracle Fusion Middleware) is affected in its Imperative Web Server component. A difficult-to-exploit, unauthenticated, network-based HTTP attack can grant an attacker unauthorized access to critical or all Helidon-accessible data. CVSS 3.1 scores this 5.9 (Medium) with high confid...

CVE-2026-73908

Helidon 4.5.0's Imperative Web Server component is vulnerable to an unauthenticated, network-accessible HTTP attack (CVSS 7.5, HIGH) allowing unauthorized access to critical or all Helidon-accessible data. Exploitation details are not provided. Patch information is not included in the documents; ...

CVE-2026-73907

CVE-2026-73907 affects Oracle Helidon 3.2.18 in the Imperative Web Server component. An unauthenticated remote attacker can exploit it via HTTP to access all Helidon-accessible data (CVSS 7.5, HIGH). No exploit code or in-the-wild exploitation is documented. See Oracle's CSP August 2026 advisory ...

CVE-2026-73900

...

CVE-2026-73901

Oracle Helidon 4.5.1's Imperative Web Server component is vulnerable to an unauthenticated, network-accessible HTTP attack requiring high complexity. Successful exploitation grants low-confidence unauthorized read and write/delete access to some Helidon data. CVSS 3.1 Base Score 4.8 (Medium). No ...