Vulnerability in Helidon Component of Oracle Fusion Middleware
CVE-2026-101576

3.7LOW

Key Information:

Vendor

Oracle
Status
Helidon
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101576?

A vulnerability exists within the Helidon component of Oracle Fusion Middleware that allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploiting this vulnerability enables unauthorized read access to sensitive data, potentially impacting the confidentiality of specific Helidon data sets. The affected versions range from 4.0.0 to 4.5.5. Immediate action is advised to mitigate risks associated with unauthorized access.

Affected Version(s)

Helidon 4.0.0 <= 4.5.5

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.