AI and data stack advisories

Severe, 6 weeks1490Projects326

1490 severe, 6 weeks · 326 projects

OracleCVE-2026-101582

Helidon: data exposure via helidon-integrations-vault

Oracle

CVE-2026-101582 · Published Oct 20, 2026 · updated Nov 6, 2026

Medium5.8
No fix yet
Oracle advisory

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-vault). Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).

Affected versions

PackageAffectedFixed in
Helidon
Product
>= 4.0.0, <= 4.5.5No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-200

More Oracle advisories

All Oracle