EUVD-2026-79598

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

EUVD-2026-79597

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

EUVD-2026-79596

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segme...

CVE-2026-83246

CVE-2026-83246 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . The vulnerability allows an unauthenticated attacker with network access via HTTP to achieve full takeover of the product, resulting in high impact to confidentialit...

CVE-2026-83245

Oracle Commerce Guided Search / Experience Manager (component: Forge ) version 11.4.0 is affected by a network-based, unauthenticated vulnerability exploitable via HTTP . The attack complexity is rated high (difficult to exploit), but successful exploitation can result in full takeover of the pro...

CVE-2026-83244

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a difficult-to-exploit vulnerability exploitable by an unauthenticated attacker with access to the physical communication segment attached to the hardware where the product exec...

EUVD-2026-79593

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2026-83241

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , contains a high-complexity, unauthenticated vulnerability exploitable over HTTP . An attacker requires user interaction from a non-attacker to succeed, after which the result is full takeover ...

EUVD-2026-79590

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79589

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2026-83240

CVE-2026-83240 affects the Forge component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . A low-privileged local attacker with infrastructure logon can exploit this vulnerability with low complexity and no user interaction , leading to high integrity impa...

CVE-2026-83237

Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 , is affected by a network-based vulnerability reachable via HTTP. A low-privileged attacker with low complexity and no user interaction can achieve unauthorized access to all accessible data (h...

CVE-2026-83238

CVE-2026-83238 affects Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge ), version 11.4.0 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP , requiring no user interaction. Successful exploitation can lead to un...

EUVD-2026-79592

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

EUVD-2026-78898

IBM ContextForge MCP Gateway = v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payload content...

CVE-2026-53710

MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...

CVE-2026-53710

MCP Context Forge (IBM) is an AI gateway and proxy for MCP, A2A, REST, and gRPC APIs. The vulnerability affects the python_sandbox_server subproject (prior to 1.0.2 ), where the RestrictedPython sandbox can be bypassed through three compounding weaknesses: raw getattr exposed in safe_builtins, ru...

CVE-2026-53710 MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...

CVE-2026-53710 MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...

CVE-2026-53710 MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...