This vulnerability affects Oracle Helidon 4.5.1 and allows unauthenticated remote attackers to compromise the product via HTTP. The flaw enables unauthorized modification of critical data or all data accessible through Helidon. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and an impact limited to integrity. Oracle's August 2026 Critical Security Patch Update advisory references Helidon among affected products and versions but does not explicitly confirm patch availability or remediation level for version 4.5.1 in the provided data. No known exploits in the wild have been reported at this time.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or all data accessible via Helidon 4.5.1, impacting data integrity. There is no reported impact on confidentiality or availability. The vulnerability is remotely exploitable without authentication, increasing its risk profile.

Oracle's August 2026 Critical Security Patch Update advisory includes Helidon among affected products and versions. However, the provided advisory content does not explicitly confirm a patch or remediation for Helidon 4.5.1. Customers should consult the official Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for the latest patch availability and apply security updates promptly. Oracle strongly recommends remaining on actively supported versions and applying all security patches without delay. Patch status is not yet confirmed—check the vendor advisory for current remediation guidance.