CVE-2026-70991

Oracle Commerce 11.4.0's Content Acquisition System component is affected. An unauthenticated attacker with local infrastructure access can exploit this vulnerability (CVSS 6.3) to gain unauthorized access to critical data, with attacks requiring human interaction and potentially impacting additi...