CVE-2026-83330
Received Received - Intake

Denial of Service in Helidon WebSocket

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-09-15
AI Q&A
2026-09-15
EPSS Evaluated
N/A
NVD
CVE-2026-83330
EUVD
EUVD-2026-79683

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
oracle helidon From 4.0.0 (inc) to 4.5.4 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a denial-of-service (DoS) vulnerability in Oracle Helidon's WebSocket component affecting versions 4.0.0 to 4.5.4. An unauthenticated attacker can exploit it remotely via HTTP to cause the system to hang or crash repeatedly, making it unavailable.

Impact Analysis

If you use affected Helidon versions, an attacker could disrupt your WebSocket services, causing downtime and preventing legitimate users from accessing the application. This could lead to service unavailability and potential loss of business operations.

Compliance Impact

This DoS vulnerability could impact compliance by causing service disruptions that violate availability requirements in GDPR (data processing integrity) and HIPAA (system access and reliability). Downtime may lead to data processing delays or unauthorized access risks.

Mitigation Strategies

Upgrade Helidon to a version later than 4.5.4 as this vulnerability affects versions 4.0.0 to 4.5.4. If immediate upgrade is not possible, restrict network access to the WebSocket component of Helidon via firewall rules or network segmentation to prevent unauthenticated HTTP access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-83330. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart