Unauthorized Access Vulnerability in Helidon by Oracle
CVE-2026-73929

8.3HIGH

Key Information:

Vendor

Oracle

Status
Vendor
CVE Published:
18 August 2026

What is CVE-2026-73929?

A vulnerability exists in Oracle's Helidon component of Fusion Middleware, specifically in version 4.5.3. This weakness allows unauthenticated attackers with network access via HTTP to exploit Helidon, potentially compromising sensitive data and disrupting services. The vulnerability not only threatens the data integrity but may also enable unauthorized updates, inserts, or deletions of data accessible through Helidon. Moreover, successful exploitation could lead to unauthorized read access to certain data and may cause a partial denial of service, affecting the broader ecosystem of products relying on Helidon.

Affected Version(s)

Helidon 4.5.3

References

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.