CVE-2026-73889: Medium severity Oracle Helidon (Oracle Fusion Middleware) vulnerability
Published Aug 18, 2026
·Updated
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected Software
2 affected components
Oracle Helidon (Oracle Fusion Middleware)=4.5.0
Oracle Helidon=4.5.0
Event History
Aug 18, 2026
CVE Published
via MITRE·09:04 PM
Data Sourced
via MITRE·09:04 PM
DescriptionSeverity
Data Sourced
via NVD·09:18 PM
DescriptionSeverityWeaknessAffected Software