CVE-2026-73890

HighCVSS 7.5

Published: 18/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

25th percentile - higher than 25% of all known CVEs

Summary

Vulnerability in Oracle Fusion Middleware Helidon (Imperative Web Server) version 4.5.0. An unauthenticated attacker can cause a hang or frequent crashes (complete DoS) via HTTP/2. Easily exploitable, CVSS 7.5.

Risk Assessment

The risk is the potential complete denial of service of Helidon, leading to unavailability of applications and disruption of business operations.

Recommendation

Apply vendor patches or update Helidon to a fixed version. Restrict network access to trusted networks only.

Original NVD description (English source)

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).