{"affected":[{"product":"Helidon","source":"CNA: oracle","vendor":"Oracle Corporation","versions":[{"lessThanOrEqual":"4.5.5","status":"affected","version":"4.0.0","versionType":"custom"}]}],"cveId":"CVE-2026-101576","cwes":["CWE-200"],"description":"Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA).  Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).","epss":{"date":"2026-11-06","percentile":0.10991,"score":0.00208},"exploits":[],"kev":null,"metrics":[{"score":3.7,"severity":"low","source":"CNA: oracle","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},{"score":3.7,"severity":"low","source":"NVD: secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}],"modifiedAt":1794003469677,"publishedAt":1792531299180,"references":[{"source":"CNA: oracle","tags":["vendor-advisory"],"url":"https://www.oracle.com/security-alerts/cpuoct2026.html"},{"source":"secalert_us@oracle.com","tags":[],"url":"https://www.oracle.com/security-alerts/cpuoct2026.html"}],"remediation":[],"revision":"929d2775574af061b432e1945d3806cd8fc3ababe65121fd95f89bdccf39c411","sources":[{"modifiedAt":1794000865776,"name":"CNA: oracle","retrievedAt":1794002914045,"url":"https://www.cve.org/CVERecord?id=CVE-2026-101576"},{"modifiedAt":1794003469677,"name":"NVD","retrievedAt":1794010752476,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101576"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794002925427,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-101576"}],"ssvc":{"assessedAt":1794000853360,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2026-101576","updatedAt":1794010752476}