Unauthenticated Network Vulnerability in Helidon Product by Oracle
CVE-2026-83459

5.3MEDIUM

Key Information:

Vendor

Oracle
Status
Helidon
Vendor
CVE Published:
15 September 2026

What is CVE-2026-83459?

A vulnerability exists in the Helidon component of Oracle Fusion Middleware that allows unauthenticated attackers with HTTP network access to exploit the system. This could result in unauthorized actions, leading to partial denial of service, which may disrupt the availability of Helidon services. It is essential for users of affected Helidon versions (3.0.0 to 3.2.20) to apply necessary patches or updates to mitigate potential security risks.

Affected Version(s)

Helidon 3.0.0 <= 3.2.20

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.