CVE-2026-70987

...

CVE-2026-70987

Oracle Commerce 11.4.0's Content Acquisition System component allows unauthenticated remote attackers via HTTP to access critical data (CVSS 7.5 HIGH, confidentiality-only). Oracle has issued updates; see https://www.oracle.com/security-alerts/cspuaug2026.html. Exploitation details are not provid...

PT-2026-70987

Name of the Vulnerable Software and Affected Versions OriginLab OriginPro affected versions not specified Description An issue exists in the parsing of OGG files due to improper validation of user-supplied data. This can lead to an out-of-bounds write, where data is written past the end of an...