CVE-2026-71032

...

CVE-2026-71029

Oracle Helidon 3.2.18 Imperative Web Server component is affected by a CVSS 6.8 medium-severity vulnerability allowing unauthenticated remote attackers to compromise Helidon and access critical data, with potential scope change impacting additional products. No patch or exploit details are provid...

CVE-2026-71017

Oracle Commerce 11.4.0's Endeca Application Controller is vulnerable to an unauthenticated, network-accessible HTTP attack (CVSS 6.5, HIGH complexity). Successful exploitation yields unauthorized access to critical data and partial denial of service. No exploit details are provided; Oracle's Augu...

CVE-2026-71011

CVE-2026-71011 affects the Experience Manager component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interaction from a...

CVE-2026-71010

...

CVE-2026-71010

Oracle Commerce version 11.4.0's Experience Manager component is vulnerable to a HIGH-severity (CVSS 7.8) local exploit requiring infrastructure access and human interaction, enabling unauthenticated attackers to compromise the application with full CIA impact. Oracle has released patches in its ...

CVE-2026-70999

...

CVE-2026-70995

...

CVE-2026-70993

...

CVE-2026-70985

Oracle Commerce 11.4.0 Content Acquisition System allows unauthenticated, network-based HTTP attacks causing high confidentiality impact (CVSS 7.5). Oracle's August 2026 CPU advisory addresses it; no exploit or root-cause details are provided in the documents.

CVE-2026-70981

...

CVE-2026-70981

Oracle Commerce 11.4.0 Content Acquisition System is affected by a critical (CVSS 9.1) unauthenticated network-based vulnerability enabling unauthorized data modification and denial of service. No exploitation details are provided; refer to Oracle's August 2026 security alert for patch information.

CVE-2026-70976

CVE-2026-70976 affects the Content Acquisition System component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve una...

CVE-2026-70970

...

CVE-2026-70970

CVE-2026-70970 affects the Runtime Tools component of Oracle WebCenter Portal (versions 12.2.1.4.0 and 14.1.2.0.0). An unauthenticated attacker with network HTTP access can compromise the application; CVSS 9.8 (critical) reflects full confidentiality, integrity, and availability impact. Oracle's ...

CVE-2026-70965

...

CVE-2026-70963

Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000, Installation and Configuration component) is vulnerable to a network-accessible attack requiring low privileges. A successful exploit yields unauthorized read and write access to a subset of data. CVSS 4.2 (Medium) reflects high at...

CVE-2026-70964

Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 has a HIGH-severity (CVSS 8.2) vulnerability in the Installation and Configuration component, allowing a low-privileged network attacker to compromise the system with unauthorized data access, creation, deletion, or modification acro...

CVE-2026-70965

Oracle Hyperion Infrastructure Technology (component: Installation and Configuration , version 11.2.25.0.000 ) is affected by an easily exploitable vulnerability that allows a low-privileged attacker with network access via HTTP to achieve full takeover of the system, resulting in high impact to ...

CVE-2026-70960

Oracle Hyperion Financial Management 11.2.25.0.000 has a HIGH-severity (CVSS 7.6) Security component flaw exploitable over HTTP by a low-privileged attacker, enabling unauthorized data access and modification with scope change. Oracle's August 2026 CPU patch is the remediation. No in-the-wild exp...