CVE-2026-70982

CVE-2026-70982 affects Oracle Commerce 11.4.0's Content Acquisition System component. An unauthenticated, network-accessible attacker can exploit it (high complexity) to gain unauthorized access to critical or all accessible data, with a CVSS 3.1 base score of 6.8. Oracle's August 2026 CPU adviso...