CVE-2026-83276

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.4

Description A flaw in the helidon-webclient-http2 component allows an unauthenticated attacker with network access via HTTP/2 to compromise the system. This can lead to a hang or a frequently repeatable crash, resulting in a complete Denial of Service (DOS), which is a condition where the service becomes unavailable to its intended users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.