CVE-2026-83278: Medium severity Oracle Helidon (Oracle Fusion Middleware) vulnerability
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-neo4j). Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Helidon executes to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Helidon accessible data as well as unauthorized access to critical data or complete access to all Helidon accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this vulnerability?
Exposure is limited to Helidon deployments using the helidon-integrations-neo4j component on affected supported versions 3.0.0 through 3.2.20 or 4.0.0 through 4.5.4. An attacker must have access to the physical communication segment connected to the hardware running Helidon.
Does exploitation require credentials or user interaction?
No. The vulnerability is unauthenticated and does not require user interaction, but exploitation is described as difficult and requires adjacent-network access.
What could a successful attacker do?
A successful attack can provide unauthorized read access to critical data or all data accessible to Helidon, and unauthorized creation, deletion, or modification of that data.