Vulnerability in Helidon of Oracle Fusion Middleware Affects Product Security
CVE-2026-101573

6.8MEDIUM

Key Information:

Vendor

Oracle

Status
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101573?

A vulnerability has been identified in the Helidon component of Oracle Fusion Middleware, specifically related to HTTP authentication. This security flaw allows unauthenticated attackers with network access through HTTP to exploit Helidon. Although the primary issue resides within Helidon, such exploitations can potentially affect additional products, expanding the potential risk. Successful exploitation of this vulnerability may lead to unauthorized access to sensitive data, providing attackers with complete access to any data available through Helidon, thus posing a significant threat to data confidentiality.

Affected Version(s)

Helidon 3.0.0 <= 3.2.21

Helidon 4.0.0 <= 4.5.5

Helidon 27.0.0

References

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.