CVE-2026-73877

...

CVE-2026-73874

Oracle Helidon 4.5.0's Imperative Web Server component is vulnerable to an easily exploitable HTTP-based attack requiring low privileges, yielding unauthorized read/write access to Helidon data (CVSS 5.4 Medium). Patch status and affected versions beyond 4.5.0 are not provided in the documents. M...

CVE-2026-73873

CVE-2026-73873 affects Helidon 3.2.18 (Imperative Web Server component), allowing a low-privileged remote attacker to read and modify a subset of Helidon data via HTTP. CVSS 4.2 (Medium) reflects high attack complexity. Oracle's CSPR August 2026 advisory is the primary reference; no patch version...

CVE-2026-73870

...

CVE-2026-73870

Oracle Helidon 4.5.0 (Imperative Web Server component) is vulnerable to an unauthenticated, network-reachable exploit requiring human interaction; successful attacks yield unauthorized read/write access to Helidon data with scope change. CVSS 3.1 base score 6.1 (Medium). Remediation details are n...

CVE-2026-73866

...

CVE-2026-73866

Oracle Helidon 4.5.0's Imperative Web Server component contains a critical vulnerability (CVSS 9.1) exploitable by an unauthenticated network attacker via HTTP, granting unauthorized creation, deletion, and modification of all Helidon-accessible data. No patch version, exploit details, or in-the-...

CVE-2026-71165

Oracle Helidon 3.2.18's Imperative Web Server component is vulnerable to a CVSS 5.4 medium-severity flaw: an authenticated low-privilege network attacker can exploit it via HTTP to gain unauthorized read and write access to Helidon data. No exploit code or in-the-wild exploitation details are pro...

CVE-2026-71165

...

CVE-2026-71166

...

CVE-2026-71154

...

CVE-2026-71151

...

CVE-2026-71149

...

CVE-2026-71146

Oracle Hyperion Financial Management 11.2.25.0.000 Security component has a local DoS flaw (CVSS 1.9 LOW); high-privilege local attacker can cause partial service disruption. No exploitation observed; patch details not provided in documents.

CVE-2026-71144

Oracle Hyperion Financial Management version 11.2.25.0.000 has a local Security component vulnerability exploitable only by a high-privileged attacker with infrastructure logon access. Successful exploitation allows unauthorized read and limited update/insert/delete access to accessible data; ava...

CVE-2026-71137

Oracle VM VirtualBox Core component in version 7.2.14 is affected by an easily exploitable vulnerability (CVSS 6.0) that allows a high-privileged local attacker to cause a hang or crash (availability impact). Exploitation details are not provided in the documents. No patch version or workaround i...

CVE-2026-71137

...

CVE-2026-71135

...

CVE-2026-71130

...

CVE-2026-71132

Oracle VM VirtualBox 7.2.14 (component: Core) is affected by a local, high-complexity vulnerability requiring high privileges, with scope-change effects that can expose all VirtualBox-accessible data. CVSS 3.1 scores it MEDIUM (5.3), confidentiality-only impact. Oracle published security advisory...