Unauthenticated Access Vulnerability in Oracle Fusion Middleware's Helidon
CVE-2026-73928

7.2HIGH

Key Information:

Vendor

Oracle

Status
Vendor
CVE Published:
18 August 2026

What is CVE-2026-73928?

The Helidon product in Oracle Fusion Middleware has a vulnerability that allows unauthenticated attackers with network access to exploit the system via HTTP. This exploitation could lead to unauthorized updates, inserts, or deletions of accessible data within Helidon, as well as unauthorized read access to certain datasets. Even though the vulnerability is contained within Helidon, the implications of an attack could extend to other connected products. Users of this affected version should take immediate steps to mitigate potential data integrity and confidentiality risks.

Affected Version(s)

Helidon 4.5.3

References

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.