CVE-2026-70716

MediumCVSS 5.9

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

21th percentile - higher than 21% of all known CVEs

Summary

Vulnerability in Oracle Fusion Middleware Helidon (component: Imperative Web Server) version 4.5.0. Difficult to exploit, allows unauthenticated attacker via HTTP to unauthorized creation, deletion or modification of critical data.

Risk Assessment

Risk of data integrity violation in systems using Helidon, potentially leading to unauthorized data changes.

Recommendation

Apply available security patches from the vendor and restrict network access to the HTTP service.

Original NVD description (English source)

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Helidon accessible data. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).