Vulnerability in Oracle Fusion Middleware's Helidon Product
CVE-2026-73939

8.6HIGH

Key Information:

Vendor

Oracle
Status
Helidon
Vendor
CVE Published:
18 August 2026

What is CVE-2026-73939?

A vulnerability in Oracle Fusion Middleware's Helidon component allows unauthenticated attack vectors via HTTP, potentially compromising the Helidon product. When exploited, this vulnerability facilitates unauthorized creation, deletion, or modification of critical data, posing significant risks not only to Helidon but potentially impacting associated products as well. The affected version 3.2.20 lacks adequate defenses against these types of attacks, which can result in severe integrity breaches.

Affected Version(s)

Helidon 3.2.20

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.