32805 matches found
CVE-2026-73900
...
CVE-2026-73901
Oracle Helidon 4.5.1's Imperative Web Server component is vulnerable to an unauthenticated, network-accessible HTTP attack requiring high complexity. Successful exploitation grants low-confidence unauthorized read and write/delete access to some Helidon data. CVSS 3.1 Base Score 4.8 (Medium). No ...
CVE-2026-73897
...
CVE-2026-73893
...
CVE-2026-73895
Oracle Helidon 3.2.18's Imperative Web Server component is vulnerable; an unauthenticated, network-accessible attacker can exploit it via HTTP to gain unauthorized read access to a subset of Helidon data (CVSS 5.3, Medium). No exploitation details are provided; see Oracle's CSP advisory for patch...
CVE-2026-73894
...
CVE-2026-73892
...
CVE-2026-73890
CVE-2026-73890 affects the Imperative Web Server component of Oracle Helidon 4.5.0 . An unauthenticated attacker with network access can trigger a complete denial of service (hang or repeatable crash) via crafted HTTP/2 requests. The CVSS 3.1 base score is 7.5 (HIGH) with an availability-only imp...
CVE-2026-73887
...
CVE-2026-73888
...
CVE-2026-73883
...
CVE-2026-73885
...
CVE-2026-73881
Oracle's Helidon 4.5.0 (Imperative Web Server component) is vulnerable to an easily exploitable HTTP-based attack requiring low privileges, allowing unauthorized read, insert, update, and delete access to Helidon data. Oracle's August 2026 CPU advisory (cspuaug2026.html) is the primary reference;...
CVE-2026-73880
CVE-2026-73880 affects Helidon 4.5.1's Imperative Web Server component, allowing a high-privileged local attacker to read critical or all Helidon-accessible data (CVSS 4.4, confidentiality-only). No exploit details, patch version, or root cause are provided in the documents; monitor Oracle's advi...
CVE-2026-73882
...
CVE-2026-73881
...
CVE-2026-73877
...
CVE-2026-73874
Oracle Helidon 4.5.0's Imperative Web Server component is vulnerable to an easily exploitable HTTP-based attack requiring low privileges, yielding unauthorized read/write access to Helidon data (CVSS 5.4 Medium). Patch status and affected versions beyond 4.5.0 are not provided in the documents. M...
CVE-2026-73873
CVE-2026-73873 affects Helidon 3.2.18 (Imperative Web Server component), allowing a low-privileged remote attacker to read and modify a subset of Helidon data via HTTP. CVSS 4.2 (Medium) reflects high attack complexity. Oracle's CSPR August 2026 advisory is the primary reference; no patch version...