CVE-2026-101568: Infoleak
Published Oct 20, 2026
·Updated
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-health). Supported versions that are affected are 3.0.0-3.2.21, 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected Software
4 affected components
Oracle Helidon>=3.0.0<=3.2.21, >=4.0.0<=4.5.5, =27.0.0
Oracle Helidon>=3.0.0<=3.2.21
Oracle Helidon>=4.0.0<=4.5.5
Oracle Helidon=27.0.0
Event History
Oct 20, 2026
CVE Published
via MITRE·09:21 PM
Data Sourced
via MITRE·09:21 PM
DescriptionSeverity
Data Sourced
via NVD·10:18 PM
DescriptionSeverityWeakness
Nov 9, 2026
Data Sourced
via NVD·10:48 PM
Affected Software