CVE-2026-83459
published 2026-09-15CVE-2026-83459: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart). Supported versions that are affected are 3.0.0-3.2.20…
PriorityP430medium5.3CVSS 3.1
AVNACLPRNUINSUCNINAL
EPSS
0.41%
34.3th percentile
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart). Supported versions that are affected are 3.0.0-3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | helidon | >= 3.0.0 < 3.2.20 | 3.2.20 |
| oracle_corporation | helidon | 3.0.0 – 3.2.20 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Oracle Helidon up to 3.2.20 helidon-media-multipart denial of service
vuldb·2026-09-16·CVSS 5.3
CVE-2026-83459 [MEDIUM] Oracle Helidon up to 3.2.20 helidon-media-multipart denial of service
A vulnerability classified as problematic has been found in Oracle Helidon up to 3.2.20. This impacts an unknown function of the component helidon-media-multipart. This manipulation causes denial of service.
This vulnerability is handled as CVE-2026-83459. The attack can be initiated remotely. There is not any exploit available.
GHSA
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart).
ghsa_unreviewed·2026-09-15
CVE-2026-83459 [MEDIUM] CWE-400 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart). Supported versions that are affected are 3.0.0-3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-15
Published