CVE-2026-101581: Medium severity Oracle Helidon vulnerability
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-round-robin). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).
Affected Software
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An unauthenticated attacker with network access via DNS can exploit it. No privileges or user interaction are required.
Which Helidon versions are affected?
Affected supported versions are 4.0.0 through 4.5.5, and version 27.0.0.
What is the potential impact of a successful attack?
A successful attack can allow unauthorized update, insert, or delete access to some Helidon-accessible data, and can cause a partial denial of service.