EUVD-2026-105978

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

CVE-2026-101570

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

CVE-2026-101570

A vulnerability exists in the helidon-webserver-http2 component of the Helidon product within Oracle Fusion Middleware . Affected versions range from 4.0.0 to 4.5.5 . An unauthenticated attacker with network access via HTTP/2 can exploit this difficulty-to-exploit vulnerability to cause a partial...

PT-2026-119250

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

CVE-2026-83280

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

CVE-2026-83280

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

io.helidon.webserver.testing.junit5:helidon-webserver-testing-junit5-grpc (27.0.0-m1), io.helidon.webserver.testing.junit5:helidon-webserver-testing-junit5-http2 (27.0.0-m1) +5 more potentially affected by CVE-2026-83280 via io.helidon.webserver:helidon-webserver-http2 (27.0.0-m1)

io.helidon.webserver:helidon-webserver-http2 MAVEN version 27.0.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on io.helidon.webserver:helidon-webserver-http2 and may be impacted: -...

com.akilisha.oss:cafeai-agents (>=0.2.0, <=0.3.2), com.akilisha.oss:cafeai-connect (>=0.1.2, <=0.3.2) +55 more potentially affected by CVE-2026-83280 via io.helidon.webserver:helidon-webserver-http2 (>=4.0.0-m2, <=4.5.4)

io.helidon.webserver:helidon-webserver-http2 MAVEN version =4.0.0-m2, =0.2.0, =0.1.2, =0.1.2, =0.1.2, =0.1.2, =0.1.2, =0.1.2, =0.1.2, =0.1.2, =0.1.2, =0.9.9, =0.9.9, =3.3.1, =3.2.0, =3.3.0 and more Source cves: CVE-2026-83280 Source advisory: MEND:CVE-2026-83280...

CVE-2026-83280: Uncontrolled Resource Consumption

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...