Helidon vulnerabilities

68 known vulnerabilities in Helidon from Oracle. 68 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Helidon: Improper Authentication

  CVE-2026-101590Oct 20, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to

• 7.2 High severity

  Helidon: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-101585Oct 20, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). Supported versions that are affected are 3.0.0-3.2.21. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helid

• 7.0 High severity

  Helidon: Uncontrolled Resource Consumption

  CVE-2026-101583Oct 20, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTT

• 7.2 High severity

  Helidon: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-101579Oct 20, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-grpc-server). Supported versions that are affected are 3.0.0-3.2.21. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to comprom

• 7.5 High severity

  Helidon: Uncontrolled Resource Consumption

  CVE-2026-101572Oct 20, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTT

• 7.5 High severity

  Helidon: Uncontrolled Resource Consumption

  CVE-2026-87289Sep 15, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

• 8.1 High severity

  Helidon: Improper Access Control

  CVE-2026-83439Sep 15, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper). Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with ne

• 7.5 High severity

  Helidon: Uncontrolled Resource Consumption

  CVE-2026-83330Sep 15, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.

• 7.5 High severity

  Helidon: Uncontrolled Resource Consumption

  CVE-2026-83281Sep 15, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise He

• 7.5 High severity

  Helidon: Uncontrolled Resource Consumption

  CVE-2026-83280Sep 15, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to comp

• 7.5 High severity

  Helidon: Uncontrolled Resource Consumption

  CVE-2026-83276Sep 15, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to comp

• 7.0 High severity

  Helidon: Improper Access Control

  CVE-2026-83231Sep 15, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-dbclient-mongodb). Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with network acces

• 8.6 High severity

  Helidon: Improper Access Control

  CVE-2026-73939Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-73938Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 8.2 High severity

  Helidon: Improper Access Control

  CVE-2026-73937Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compro

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-73936Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-73935Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compro

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-73934Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compr

• 7.3 High severity

  Helidon: Improper Access Control

  CVE-2026-73933Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 8.3 High severity

  Helidon: Improper Access Control

  CVE-2026-73931Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 9.9 Critical severity

  Helidon: Improper Access Control

  CVE-2026-73930Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19 and 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 8.3 High severity

  Helidon: Improper Access Control

  CVE-2026-73929Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 7.2 High severity

  Helidon: Improper Access Control

  CVE-2026-73928Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-73927Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 8.2 High severity

  Helidon: Improper Access Control

  CVE-2026-73925Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 9.1 Critical severity

  Helidon: Improper Access Control

  CVE-2026-73924Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 9.1 Critical severity

  Helidon: Improper Access Control

  CVE-2026-73922Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 9.8 Critical severity

  Helidon: Improper Access Control

  CVE-2026-73921Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 9.4 Critical severity

  Helidon: Improper Access Control

  CVE-2026-73920Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 7.3 High severity

  Helidon: Improper Access Control

  CVE-2026-73918Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 9.1 Critical severity

  Helidon: Improper Access Control

  CVE-2026-73917Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 9.1 Critical severity

  Helidon: Improper Access Control

  CVE-2026-73916Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-73915Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 9.8 Critical severity

  Helidon: Improper Access Control

  CVE-2026-73912Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-73908Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-73907Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 9.8 Critical severity

  Helidon: Improper Access Control

  CVE-2026-73905Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-73903Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-73902Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 7.3 High severity

  Helidon: Improper Access Control

  CVE-2026-73894Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi