CVE-2026-71001

Oracle Commerce Experience Manager component in version 11.4.0 is vulnerable to unauthorized data access: a low-privileged attacker with network HTTP access can read critical data (CVSS 6.5, HIGH confidentiality impact). Oracle's August 2026 CPU advisory addresses this; no specific root cause, pa...