Vulnerability in Helidon Product of Oracle Fusion Middleware OIDC

CVE-2026-101574

What is CVE-2026-101574?

A vulnerability has been identified in the Helidon component of Oracle Fusion Middleware, specifically within the OIDC protocol. This flaw permits an unauthenticated attacker with network access via HTTP to potentially compromise the Helidon product. Exploitation of this vulnerability necessitates human interaction, making it challenging for attackers to execute. While the vulnerability resides within Helidon, successful exploitation may lead to broader implications, potentially affecting other connected Oracle products. An attacker could gain unauthorized access to sensitive data, allowing for unauthorized operations such as updates, insertions, or deletions of accessible data. Organizations utilizing affected versions should consult the Oracle Advisory for mitigation strategies.

References