CVE-2026-73895 is a vulnerability in Oracle Helidon versions 3.0.0 through 3.2.17 and 3.2.18 that allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some Helidon accessible data. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity with confidentiality impact only. Oracle has included Helidon in its August 2026 Critical Security Patch Update, which addresses this and other vulnerabilities.
CVE-2026-73869 is a vulnerability in Oracle Helidon versions 3.0.0 through 3.2.17 and 3.2.18 that allows an unauthenticated attacker with network access via HTTP to compromise the product. Exploitation requires human interaction from a user other than the attacker. Successful exploitation can lead to unauthorized read, update, insert, or delete access to some Helidon accessible data. The vulnerability has a CVSS 3.1 base score of 6.1, indicating medium severity with confidentiality and integrity impacts. The vulnerability also has scope change implications, potentially affecting additional products beyond Helidon. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory but does not explicitly confirm patch availability for these specific versions in the provided content.
CVE-2026-73865 is a critical vulnerability in Oracle Helidon versions 3.0.0 through 3.2.17 and 3.2.18. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized creation, deletion, or modification access to critical or all Helidon accessible data. The vulnerability has a CVSS 3.1 base score of 9.1, indicating high confidentiality and integrity impacts without availability impact. Oracle has released security patches addressing this vulnerability as part of their August 2026 Critical Security Patch Update.
CVE-2026-71166 is a critical vulnerability in Oracle Helidon versions 3.0.0 through 3.2.17 and 3.2.18. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data, unauthorized access to all accessible data, and partial denial of service. The vulnerability has a CVSS 3.1 base score of 9.4, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-71164 is a critical vulnerability in Oracle Helidon versions 3.0.0 through 3.2.17 and 3.2.18. It allows an unauthenticated attacker with network access via HTTP to fully compromise the Helidon product, potentially leading to complete takeover. The vulnerability affects the Imperative Web Server component of Oracle Fusion Middleware. The CVSS 3.1 base score is 9.8, indicating severe impacts on confidentiality, integrity, and availability.
CVE-2026-71159 is a high-severity vulnerability in Oracle Helidon versions 3.0.0 through 3.2.17 and 3.2.18. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data and perform unauthorized update, insert, or delete operations on some accessible data. The vulnerability affects the Imperative Web Server component of Helidon and has a CVSS 3.1 base score of 8.2, indicating high impact on confidentiality and integrity.
CVE-2026-71152 is a critical vulnerability in Oracle Helidon's Imperative Web Server component. It affects Helidon versions 3.0.0 through 3.2.17, 4.0.0 through 4.4.1, and version 4.5.0. The flaw allows an unauthenticated attacker with network access via HTTP to fully compromise the Helidon server, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has acknowledged the issue in their August 2026 Critical Security Patch Update advisory and strongly recommends applying available patches promptly. The advisory confirms patches are available for affected versions, though specific patch links for Helidon are not provided in the input data.
CVE-2026-71074 is a critical vulnerability in Oracle Helidon affecting versions 1.0.0 through 1.4.19 and 3.0.0 through 3.2.17. It allows an unauthenticated attacker with network access via HTTP to fully compromise the Helidon server, potentially resulting in complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released security patches addressing this issue as part of their August 2026 Critical Security Patch Update.
CVE-2026-71065 is a critical vulnerability in Oracle Helidon versions 3.0.0 through 3.2.17 and 3.2.18. It allows an unauthenticated attacker with network access via HTTP to compromise the Helidon product. Successful exploitation can lead to unauthorized access to critical or all Helidon accessible data, and unauthorized modification (update, insert, delete) of some data. The vulnerability has a CVSS 3.1 base score of 9.3, indicating high confidentiality and integrity impact. The vulnerability may also affect additional products due to scope change. Oracle has published a Critical Security Patch Update advisory referencing this vulnerability, recommending patch application. Patch availability details are provided in the advisory.
CVE-2026-71029 is a vulnerability in Oracle Helidon versions 3.0.0 through 3.2.17 and 3.2.18 that allows an unauthenticated attacker with network access via HTTP to potentially gain unauthorized access to critical or all accessible data within Helidon. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 6.8, indicating a medium severity with high confidentiality impact but no integrity or availability impact. Successful exploitation may also affect additional products due to scope change. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory.
CVE-2026-70951 is a high-severity vulnerability in Oracle Siebel CRM End User's Document Management component. It affects versions from 17.0 through 26.6. The flaw allows a low-privileged attacker with network access via HTTP to compromise the Siebel CRM End User, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this fix in its August 2026 Critical Security Patch Update.
CVE-2026-70949 is a high-severity vulnerability in Oracle Siebel CRM Deployment (Server Infrastructure component) affecting versions 17.0 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the deployment, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released security patches as part of their August 2026 Critical Security Patch Update. Customers are strongly advised to apply these patches promptly to mitigate risk.
CVE-2026-70910 is a high-severity vulnerability in Oracle Siebel CRM Integration's REST component affecting versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data within Siebel CRM Integration. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring privileges or user interaction.
CVE-2026-70908 is a vulnerability in Oracle Helidon versions 3.0.0 through 3.2.17 and 3.2.18 that allows an unauthenticated attacker with network access via HTTP to cause a denial of service by hanging or crashing the Helidon server. The vulnerability impacts availability but does not affect confidentiality or integrity.
CVE-2026-70859 is a high-severity vulnerability in Oracle Siebel CRM Integration's REST component affecting versions 17.0 through 26.6. It allows a low-privileged attacker with network access via HTTP to potentially take over the Siebel CRM Integration product. The vulnerability has significant confidentiality, integrity, and availability impacts and may also affect additional Oracle products due to scope change. Oracle has released security patches addressing this and many other vulnerabilities in their August 2026 Critical Security Patch Update.
CVE-2026-70855 is a critical vulnerability in Oracle Siebel CRM's Siebel Apps - Self Service component (Helpdesk/Training). It affects versions from 17.0 through 26.6. The flaw allows an unauthenticated attacker with network access via HTTP to compromise the application, requiring user interaction from a third party. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Siebel Apps - Self Service and may impact additional products due to scope change. The CVSS 3.1 base score is 9.3, indicating high confidentiality and integrity impacts without availability impact.
CVE-2026-70716 is a vulnerability in Oracle Helidon's Imperative Web Server component affecting versions 3.0.0 through 3.2.17, 4.0.0 through 4.4.1, and version 4.5.0. It allows an unauthenticated attacker with network access via HTTP to potentially compromise Helidon, resulting in unauthorized creation, deletion, or modification of critical or all accessible data. The vulnerability is rated medium severity with a CVSS 3.1 base score of 5.9, primarily impacting data integrity. The vulnerability is difficult to exploit and no known exploits are reported in the wild. Oracle has released security patches addressing this and many other vulnerabilities in their August 2026 Critical Security Patch Update. Users are strongly advised to apply these patches promptly.
CVE-2026-60915 is a high-severity vulnerability in Oracle Helidon versions 3.0.0 through 3.2.17, 4.0.0 through 4.4.1, and version 4.5.0. It allows an unauthenticated attacker with network access via HTTP to potentially create, delete, modify, or access critical data without authorization. The vulnerability is difficult to exploit but can lead to significant confidentiality and integrity impacts. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which provides patches for affected versions.
CVE-2026-60798 is a vulnerability in Oracle Siebel CRM Deployment's Migration component affecting versions 17.0 through 26.6. It allows a low privileged attacker with network access via HTTP to compromise the deployment, potentially leading to unauthorized access and modification of critical data. The vulnerability has a CVSS 3.1 base score of 8.5, indicating high severity with significant confidentiality and integrity impacts. Attacks may also affect additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update addressing this and many other vulnerabilities.
CVE-2026-60797 is a high-severity vulnerability in Oracle Siebel CRM Integration's REST component affecting versions 17.0 through 26.6. It allows an unauthenticated attacker with network access via HTTPS to potentially compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, or unauthorized access to all data accessible through Siebel CRM Integration. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 7.4, reflecting high confidentiality and integrity impacts but no availability impact.