Unauthenticated Access Vulnerability in Oracle Helidon Integrations Vault
CVE-2026-101582

5.8MEDIUM

Key Information:

Vendor

Oracle
Status
Helidon
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101582?

An unauthenticated access vulnerability has been identified in the Helidon product of Oracle Fusion Middleware, specifically affecting the helidon-integrations-vault component. This vulnerability allows an attacker with network access via HTTP to potentially compromise the Helidon system without authentication. While the flaw resides in Helidon itself, its exploitation could impact other related products, broadening the scope of its effects. Successful exploitation may lead to unauthorized access to sensitive data within Helidon, posing significant security risks.

Affected Version(s)

Helidon 4.0.0 <= 4.5.5

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.