Denial of Service Vulnerability in Helidon by Oracle Fusion Middleware
CVE-2026-101570

3.7LOW

Key Information:

Vendor

Oracle
Status
Helidon
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101570?

A vulnerability in Helidon, part of Oracle Fusion Middleware's helidon-webserver-http2 component, allows unauthenticated attackers with network access via HTTP/2 to exploit the system. This exploitation can lead to a partial denial of service (DoS) condition, causing interruptions in service for users. The affected versions span from 4.0.0 to 4.5.5, making it crucial for users to apply security patches to mitigate the risks associated with this vulnerability.

Affected Version(s)

Helidon 4.0.0 <= 4.5.5

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.