CVE-2026-73902

HighCVSS 7.5

Published: 18/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.32%

25th percentile - higher than 25% of all known CVEs

Summary

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) in version 3.2.19. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to cause a hang or frequently repeatable crash (complete DoS) of Helidon.

Risk Assessment

The risk is the ability of a remote attacker to completely halt Helidon, leading to service unavailability and operational disruption.

Recommendation

Apply Oracle patches for version 3.2.19 immediately and restrict network access to the Helidon server.

Original NVD description (English source)

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).