CVE-2026-73866
CriticalCVSS 9.1Summary
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to perform unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1 (impact on confidentiality and integrity).
Risk Assessment
An attacker can compromise data integrity and confidentiality, potentially leading to loss or modification of critical information. Risk is high due to ease of exploitation.
Recommendation
Apply Oracle patches for version 4.5.0. Monitor access logs and restrict access to the Helidon server.
Original NVD description (English source)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).