CVE-2026-71006

...

CVE-2026-71006

CVE-2026-71006 affects Oracle Commerce Experience Manager 11.4.0 via HTTP, exploitable by an unauthenticated remote attacker requiring user interaction, with CVSS 6.1 (MEDIUM) for confidentiality and integrity impacts. Oracle's August 2026 CPU advisory is the primary reference; no specific patch ...