CVE-2026-70922

Oracle Financial Services Enterprise Case Management (versions 8.0.8.2 and 8.1.2.11) Web UI has an easily exploitable flaw allowing a low-privileged network attacker via HTTP to fully compromise the application (CVSS 8.8). Oracle's August 2026 CPU advisory is referenced for remediation details.