CVE-2026-73914

Received Received - Intake

Unauthenticated Partial DoS in Helidon

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Oracle

Description

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 6.5 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-18

Generated

2026-08-19

AI Q&A

2026-08-19

EPSS Evaluated

N/A

NVD

CVE-2026-73914

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	helidon	4.5.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Fusion Middleware's Helidon product, specifically in the Imperative Web Server component. It affects version 4.5.0 and allows unauthenticated attackers to exploit it via HTTP network access. The vulnerability can lead to unauthorized data access and partial denial of service (DOS) of the Helidon server.

Impact Analysis

An attacker could read some of your Helidon server data without authentication and disrupt its availability, causing partial service outages. This may lead to data leaks or service interruptions for users relying on the affected system.

Compliance Impact

This vulnerability could lead to unauthorized data access, which may violate GDPR's data protection requirements or HIPAA's safeguards for sensitive health information. Organizations using the affected Helidon version may face compliance violations and potential penalties.

Mitigation Strategies

Apply the latest security patches or updates for Helidon version 4.5.0 from Oracle. If patches are unavailable, consider upgrading to a supported version or disabling the Imperative Web Server component if not required. Monitor Oracle's security advisories for updates.

Hi! I’m here to help you understand CVE-2026-73914. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70