CVE-2026-71065

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 3.2.18

Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized access to critical data or complete access to all accessible data, as well as unauthorized update, insert, or delete operations. The impact may extend beyond Helidon to affect additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.