PT-2026-78217 · Oracle · Helidon

CVE-2026-73929

·

Published

2026-08-18

·

Updated

2026-08-28

CVSS v3.1

8.3

High

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon version 4.5.3
Description A flaw in the Imperative Web Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. This issue can lead to unauthorized read, update, insert, or delete access to certain accessible data. Additionally, it may enable an attacker to cause a partial denial of service (DOS), which is a condition where a system becomes partially unavailable to its intended users. While the issue resides in Helidon, successful exploitation may significantly impact other integrated products.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-12682
CVE-2026-73929

Affected Products

Helidon