helidon vulnerabilities and fixes

Recent CVEs affecting helidon, with upgrade or downgrade steps. 97 tracked.

helidon has 97 tracked vulnerabilities, 17 critical. A fixed release or vendor patch exists for 69. Most recent: 2026-08-18. Highest priority: CVE-2026-71074 (score 53/100).

• CVE-2026-60853 LOW 3.7 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-60915 HIGH 7.4 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71074 CRITICAL 9.8 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71152 CRITICAL 9.8 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71164 CRITICAL 9.8 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73905 CRITICAL 9.8 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73912 CRITICAL 9.8 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73921 CRITICAL 9.8 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71166 CRITICAL 9.4 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71167 CRITICAL 9.4 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73920 CRITICAL 9.4 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73865 CRITICAL 9.1 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73866 CRITICAL 9.1 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73916 CRITICAL 9.1 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73917 CRITICAL 9.1 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73922 CRITICAL 9.1 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73924 CRITICAL 9.1 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73930 CRITICAL 9.9 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71065 CRITICAL 9.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73937 HIGH 8.2 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73939 HIGH 8.6 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-70908 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71159 HIGH 8.2 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73882 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71153 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71158 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73878 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73883 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73884 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73887 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73890 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73902 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73907 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73908 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73915 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73925 HIGH 8.2 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73927 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73929 HIGH 8.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73931 HIGH 8.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73934 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73935 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73936 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73938 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73879 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73903 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71110 HIGH 8.1 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73891 HIGH 7.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73894 HIGH 7.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73918 HIGH 7.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73933 HIGH 7.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71029 MEDIUM 6.8 UPGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71155 HIGH 8.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73875 HIGH 7.2 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73876 HIGH 7.2 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73885 HIGH 7.2 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73886 HIGH 7.2 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73896 MEDIUM 6.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73914 MEDIUM 6.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73928 HIGH 7.2 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71160 HIGH 7.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71162 MEDIUM 6.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71161 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73867 MEDIUM 6.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73868 MEDIUM 6.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73892 MEDIUM 6.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73893 MEDIUM 6.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73897 MEDIUM 6.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73904 MEDIUM 6.5 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73909 MEDIUM 5.9 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73932 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71156 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71157 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73871 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73872 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73877 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73888 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73889 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73895 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73899 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73900 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73906 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73910 MEDIUM 5.3 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-70923 MEDIUM 6.1 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73869 MEDIUM 6.1 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73870 MEDIUM 6.1 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73898 MEDIUM 6.1 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73901 MEDIUM 4.8 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71154 MEDIUM 6.1 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-71165 MEDIUM 5.4 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73874 MEDIUM 5.4 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73881 MEDIUM 5.4 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73911 MEDIUM 5.4 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73913 MEDIUM 5.4 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73919 MEDIUM 5.4 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73923 LOW 3.7 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73873 MEDIUM 4.2 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)
• CVE-2026-73880 MEDIUM 4.4 DOWNGRADE Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server)

FAQ

How do I fix helidon vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is helidon being exploited right now?

None of the tracked helidon CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which helidon CVE should I patch first?

CVE-2026-71074 currently ranks highest (53/100): Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

← Back to latest CVEs