Unauthenticated Access Vulnerability in Helidon by Oracle
CVE-2026-73931

8.3HIGH

Key Information:

Vendor

Oracle
Status
Helidon
Vendor
CVE Published:
18 August 2026

What is CVE-2026-73931?

A vulnerability exists in Helidon, a component of Oracle Fusion Middleware's Imperative Web Server, specifically in version 4.5.3. This flaw allows unauthenticated attackers with network access via HTTP to exploit the system. Successful exploitation could lead to unauthorized updates, deletions, or insertions of data within Helidon, as well as unauthorized reading of sensitive data. Additionally, it poses a risk of causing a partial denial of service, impacting the availability of the Helidon application. This vulnerability not only threatens Helidon but may also affect other interconnected systems.

Affected Version(s)

Helidon 4.5.3

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.