Unauthorized Data Access in Helidon Product of Oracle Fusion Middleware

CVE-2026-101577

What is CVE-2026-101577?

A vulnerability exists in the Helidon component of Oracle Fusion Middleware, affecting versions from 4.0.0 to 4.5.5. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise Helidon, enabling unauthorized updates, insertions, or deletions of accessible data. Successful exploitation requires human interaction from a user other than the attacker, complicating the attack vector. This vulnerability emphasizes the need for enhanced security measures to protect against unauthorized data manipulation.

References