CVE-2026-70954

Oracle Commerce Platform 11.4.0 (Dynamo Application Framework) has a critical remotely exploitable flaw: an unauthenticated attacker via HTTP can achieve full platform compromise (CVSS 9.8). Oracle's August 2026 CPU provides remediation; no in-the-wild exploitation details are provided in the doc...