Vulnerability in Helidon Product of Oracle Fusion Middleware

CVE-2026-101571

What is CVE-2026-101571?

An access control vulnerability exists in the Helidon component of Oracle Fusion Middleware, specifically within the helidon-security-providers-idcs-mapper. This vulnerability can be exploited by a low-privileged attacker who has logged into the infrastructure where Helidon operates, enabling them to potentially compromise the system. While the vulnerability directly impacts only Helidon, successful exploitation may have broader implications on other connected Oracle products, allowing unauthorized access to sensitive data or even complete access to all data accessible through Helidon. It is critical for organizations using affected versions to implement recommended patches and updates as outlined in Oracle's security advisory.

References