Unauthorized Access Vulnerability in Oracle Helidon Security Providers

CVE-2026-101578

What is CVE-2026-101578?

A vulnerability has been identified in Oracle's Helidon product within the Fusion Middleware suite, specifically in the component responsible for Google login security. This vulnerability allows an unauthenticated attacker with HTTP network access to potentially compromise the Helidon system. If exploited, the attacker could gain unauthorized read access to certain data within the Helidon environment, potentially exposing sensitive information. It is essential for users of versions 4.0.0 to 4.5.5 to understand the implications of this vulnerability and take necessary steps to mitigate risk.

References