CVE-2026-73876

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.1

Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized read, update, insert, or delete access to a subset of accessible data. Although the issue resides in Helidon, attacks may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.