5.9
Medium
CVE-2026-70716 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
Description
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Helidon accessible data. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).
Affected products and versions
Other CVEs of Helidon
The 135 CVEs of Helidon →
CVE-2026-101590
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security)
9.1
Critical
CVE-2026-101586
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient)
5.3
Medium
CVE-2026-101588
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket)
5.3
Medium
CVE-2026-101587
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1)
5.3
Medium