Executive Summary

CVE‑2026‑83460 exposes a vulnerability in Oracle Fusion Middleware’s Helidon LRA component (v4.0.0‑4.5.4). An unauthenticated attacker with network access over HTTP can exploit the flaw to read a subset of Helidon data and perform unauthorized insert, update, or delete operations. The flaw carries a CVSS v3.1 score of 6.5 (low confidentiality and integrity impact) and is not yet listed in the CISA KEV database.

---

Authoritative CVE Metadata - CVSS Base Score: 6.5 (MEDIUM) - Published: 2026-09-15T20:18:54.813 - Last Modified: 2026-09-21T01:16:29.510

Original Description: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).

"You cannot find yourself by going into the past. You can find yourself by coming into the present."

— Eckhart Tolle