Threat Intelligence Database

CVE-2026-73939 is a high-severity vulnerability in Oracle Helidon version 3.2.20 that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or all accessible data in Helidon. The vulnerability has a CVSS 3.1 base score of 8.6, indicating a significant impact on data integrity. Although the vulnerability is specific to Helidon, attacks may affect additional Oracle products. Oracle has published a Critical Security Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for this specific version in the provided content.

CVE-2026-73938 is a high-severity vulnerability in Oracle Helidon version 4.5.0 that allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring privileges or user interaction. Oracle has included Helidon 4.5.0 in its August 2026 Critical Security Patch Update advisory, indicating that patches addressing this and other vulnerabilities are available.

CVE-2026-73937 is a high-severity vulnerability in Oracle Helidon version 4.5.0 that allows an unauthenticated attacker with network access via HTTP/2 to cause a denial of service (hang or crash) and unauthorized read access to some data. The vulnerability has a CVSS 3.1 base score of 8.2, reflecting confidentiality and availability impacts. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory, recommending customers apply patches promptly. No explicit patch version or remediation details are provided in the advisory excerpt, so patch status is not yet confirmed. No known exploits in the wild have been reported.

CVE-2026-73936 is a high-severity vulnerability in Oracle Helidon version 4.5.1. It allows an unauthenticated attacker with network access via HTTP to cause a denial of service by hanging or crashing the Helidon server. The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has included this issue in its August 2026 Critical Security Patch Update, which provides patches for multiple products including Helidon. No specific patch version or remediation details for Helidon 4.5.1 are explicitly stated in the advisory, so users should consult the Oracle advisory for patch availability and installation instructions.

CVE-2026-73935 is a high-severity vulnerability in Oracle Helidon version 4.5.1 that allows an unauthenticated attacker with network access via HTTP/2 to cause a denial of service by hanging or crashing the Helidon server. The vulnerability impacts availability but does not affect confidentiality or integrity. No official patch or remediation level is explicitly stated in the vendor advisory, but Oracle strongly recommends applying security patches promptly. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant availability impact. No known exploits in the wild have been reported at this time.

CVE-2026-73934 is a high-severity vulnerability in Oracle Helidon version 3.2.19 that allows an unauthenticated attacker with network access via HTTP/2 to cause a denial of service by hanging or crashing the Helidon server. The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has included this issue in its August 2026 Critical Security Patch Update advisory, which addresses multiple vulnerabilities across various products including Helidon. The advisory recommends applying security patches promptly to mitigate such vulnerabilities.

CVE-2026-73933 is a high-severity vulnerability in Oracle Helidon version 4.5.3 that allows an unauthenticated attacker with network access via HTTP to perform unauthorized read, update, insert, or delete operations on accessible data. The vulnerability also enables the attacker to cause a partial denial of service. The CVSS 3.1 base score is 7.3, reflecting impacts on confidentiality, integrity, and availability. Oracle has published a Critical Security Patch Update advisory listing affected products and versions, including Helidon 4.5.3, but the specific patch status for this vulnerability is not explicitly confirmed in the advisory. Customers are strongly recommended to apply Oracle's security patches promptly.

CVE-2026-73932 is a medium severity vulnerability in Oracle Helidon version 4.5.3. It allows an unauthenticated attacker with network access via HTTP to cause a partial denial of service (partial DOS) on the Helidon server. The vulnerability impacts availability but does not affect confidentiality or integrity. There is no explicit vendor patch or remediation level stated in the advisory, and no known exploits in the wild have been reported. Oracle strongly recommends applying security patches promptly as part of their Critical Security Patch Update program.

CVE-2026-73931 is a high-severity vulnerability in Oracle Helidon version 4.5.3 that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can lead to unauthorized update, insert, or delete operations on some Helidon accessible data, unauthorized read access to a subset of data, and the ability to cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.3, indicating significant confidentiality, integrity, and availability impacts. The vulnerability may also affect additional products due to scope change. Oracle has published a Critical Security Patch Update advisory that includes this vulnerability among many others, but specific patch availability for Helidon 4.5.3 is not explicitly stated in the advisory content provided.

CVE-2026-73930 is a critical vulnerability in Oracle Helidon version 4.5.3 that allows an unauthenticated attacker with network access via HTTP to compromise the product. The vulnerability can lead to unauthorized creation, deletion, or modification of critical data, unauthorized read access to some data, and partial denial of service. The vulnerability has a CVSS 3.1 base score of 9.9, indicating critical severity with impacts on confidentiality, integrity, and availability. The vulnerability may also affect additional products due to scope change. Oracle has published a security advisory referencing this vulnerability but has not explicitly stated the patch or remediation status in the advisory content provided.