CVE-2026-70978

creationtimestamp| type| source ---|---|--- 2026-08-18 22:24:22+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfaztpfce2j 2026-08-18 23:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfczosxjx2u 2026-08-19 16:47:17+00:00| seen|...

CVE-2026-70978

Oracle Commerce 11.4.0's Content Acquisition System component has a critical unauthenticated HTTP vulnerability (CVSS 9.1) allowing full confidentiality and integrity compromise. Oracle's August 2026 security advisory is the source for details. No exploitation evidence or specific fix version is ...