CVE-2026-70990

Oracle Commerce 11.4.0 Content Acquisition System is vulnerable to an unauthenticated, network-based HTTP attack with high complexity (CVSS 6.8) allowing unauthorized access to critical data. No exploitation or fix details are provided. Monitor Oracle's August 2026 security advisory for patches.