This vulnerability affects Oracle Helidon 4.5.3 and allows an unauthenticated attacker with network access via HTTP to compromise the product by gaining unauthorized ability to read, update, insert, or delete some accessible data, as well as cause a partial denial of service. The vulnerability is easily exploitable and has a CVSS 3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). Oracle's August 2026 Critical Security Patch Update advisory lists Helidon 4.5.3 among affected versions but does not explicitly confirm the availability of a patch for this specific CVE. The advisory urges customers to remain on actively supported versions and apply security patches without delay.

Successful exploitation can lead to unauthorized read and modification (update, insert, delete) of some Helidon accessible data and cause a partial denial of service condition. This impacts confidentiality, integrity, and availability of the affected system.

Oracle strongly recommends that customers apply the security patches provided in the August 2026 Critical Security Patch Update without delay. The vendor advisory lists Helidon 4.5.3 as affected but does not explicitly confirm patch availability for CVE-2026-73933. Customers should consult the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for the latest patch availability and installation instructions. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.