Vulnerability in Helidon Product of Oracle Fusion Middleware
CVE-2026-83439

8.1HIGH

Key Information:

Vendor

Oracle

Status
Vendor
CVE Published:
15 September 2026

What is CVE-2026-83439?

A vulnerability exists in Oracle's Helidon within the Fusion Middleware suite, specifically in the helidon-security-providers-idcs-mapper component. This flaw could allow an attacker with low privileges and network access via HTTP to compromise the Helidon environment. Successful exploitation could enable unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible through Helidon, leading to significant security concerns.

Affected Version(s)

Helidon 3.0.0 <= 3.2.20

Helidon 4.0.0 <= 4.5.4

References

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.