CVE-2026-73925

HighCVSS 8.2

Published: 18/08/2026(UTC)Updated: 28/08/2026(UTC)Translated: 28/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) affecting versions 1.0.0-1.4.18. Easily exploitable by an unauthenticated attacker with network access via HTTP, allowing unauthorized creation, deletion, or modification of critical data or all Helidon data, as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts).

Risk Assessment

An attacker can modify or delete critical data and gain unauthorized access to some information, potentially leading to integrity and confidentiality breaches.

Recommendation

Update Helidon to a version newer than 1.4.18 or apply security patches from Oracle.

Other vulnerabilities in Helidon

See all

Original NVD description (English source)

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS