CVE-2026-70989

Oracle Commerce 11.4.0's Content Acquisition System allows a low-privileged local attacker to access critical or all accessible data with confidentiality impact; no root cause, exploit, or patch details are provided in the documents.