32922 matches found
CVE-2026-73892
...
CVE-2026-73890
CVE-2026-73890 affects the Imperative Web Server component of Oracle Helidon 4.5.0 . An unauthenticated attacker with network access can trigger a complete denial of service (hang or repeatable crash) via crafted HTTP/2 requests. The CVSS 3.1 base score is 7.5 (HIGH) with an availability-only imp...
CVE-2026-73887
...
CVE-2026-73888
...
CVE-2026-73883
...
CVE-2026-73885
...
CVE-2026-73881
Oracle's Helidon 4.5.0 (Imperative Web Server component) is vulnerable to an easily exploitable HTTP-based attack requiring low privileges, allowing unauthorized read, insert, update, and delete access to Helidon data. Oracle's August 2026 CPU advisory (cspuaug2026.html) is the primary reference;...
CVE-2026-73880
CVE-2026-73880 affects Helidon 4.5.1's Imperative Web Server component, allowing a high-privileged local attacker to read critical or all Helidon-accessible data (CVSS 4.4, confidentiality-only). No exploit details, patch version, or root cause are provided in the documents; monitor Oracle's advi...
CVE-2026-73882
...
CVE-2026-73881
...
CVE-2026-73877
...
CVE-2026-73874
Oracle Helidon 4.5.0's Imperative Web Server component is vulnerable to an easily exploitable HTTP-based attack requiring low privileges, yielding unauthorized read/write access to Helidon data (CVSS 5.4 Medium). Patch status and affected versions beyond 4.5.0 are not provided in the documents. M...
CVE-2026-73873
CVE-2026-73873 affects Helidon 3.2.18 (Imperative Web Server component), allowing a low-privileged remote attacker to read and modify a subset of Helidon data via HTTP. CVSS 4.2 (Medium) reflects high attack complexity. Oracle's CSPR August 2026 advisory is the primary reference; no patch version...
CVE-2026-73870
...
CVE-2026-73870
Oracle Helidon 4.5.0 (Imperative Web Server component) is vulnerable to an unauthenticated, network-reachable exploit requiring human interaction; successful attacks yield unauthorized read/write access to Helidon data with scope change. CVSS 3.1 base score 6.1 (Medium). Remediation details are n...
CVE-2026-73866
...
CVE-2026-73866
Oracle Helidon 4.5.0's Imperative Web Server component contains a critical vulnerability (CVSS 9.1) exploitable by an unauthenticated network attacker via HTTP, granting unauthorized creation, deletion, and modification of all Helidon-accessible data. No patch version, exploit details, or in-the-...
CVE-2026-71165
Oracle Helidon 3.2.18's Imperative Web Server component is vulnerable to a CVSS 5.4 medium-severity flaw: an authenticated low-privilege network attacker can exploit it via HTTP to gain unauthorized read and write access to Helidon data. No exploit code or in-the-wild exploitation details are pro...