Vulnerability in Helidon Common Mapper of Oracle Fusion Middleware
CVE-2026-101583

7HIGH

Key Information:

Vendor

Oracle
Status
Helidon
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101583?

A vulnerability in Oracle's Helidon component of Fusion Middleware poses significant risks, allowing unauthenticated attackers with network access via HTTP to potentially compromise the system. Exploiting this flaw could enable unauthorized users to create, delete, or modify critical data within Helidon, as well as gain unauthorized read access to sensitive information. The vulnerability also allows for an unauthorized attempt to partially disrupt services, posing serious integrity and availability risks.

Affected Version(s)

Helidon 4.0.0 <= 4.5.5

Helidon 27.0.0

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.