CVE-2026-71064

...

CVE-2026-71060

...

CVE-2026-71057

A HIGH-severity (CVSS 8.5) HTTP-accessible vulnerability in Oracle BI Publisher's BI Platform Security component affects versions 8.2.0.0.0, 12.2.1.4.0, and 26.1.0.0.0, allowing a low-privileged attacker to access critical data and cause partial denial of service. Oracle's August 2026 security ad...

CVE-2026-71048

...

CVE-2026-71044

...

CVE-2026-71043

...

CVE-2026-71038

...

CVE-2026-71033

...

CVE-2026-71031

...

CVE-2026-71031

Oracle Commerce 11.4.0's Endeca Application Controller component is vulnerable via HTTP to an unauthenticated, easily exploitable attack requiring user interaction (CVSS 6.1). Successful attacks enable unauthorized read, update, insert, and delete access to affected data with scope change to addi...

CVE-2026-71032

...

CVE-2026-71029

Oracle Helidon 3.2.18 Imperative Web Server component is affected by a CVSS 6.8 medium-severity vulnerability allowing unauthenticated remote attackers to compromise Helidon and access critical data, with potential scope change impacting additional products. No patch or exploit details are provid...

CVE-2026-71017

Oracle Commerce 11.4.0's Endeca Application Controller is vulnerable to an unauthenticated, network-accessible HTTP attack (CVSS 6.5, HIGH complexity). Successful exploitation yields unauthorized access to critical data and partial denial of service. No exploit details are provided; Oracle's Augu...

CVE-2026-71011

CVE-2026-71011 affects the Experience Manager component of Oracle Commerce Guided Search / Oracle Commerce Experience Manager , version 11.4.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interaction from a...

CVE-2026-71010

...

CVE-2026-71010

Oracle Commerce version 11.4.0's Experience Manager component is vulnerable to a HIGH-severity (CVSS 7.8) local exploit requiring infrastructure access and human interaction, enabling unauthenticated attackers to compromise the application with full CIA impact. Oracle has released patches in its ...

CVE-2026-70999

...

CVE-2026-70995

...

CVE-2026-70993

...

CVE-2026-70985

Oracle Commerce 11.4.0 Content Acquisition System allows unauthenticated, network-based HTTP attacks causing high confidentiality impact (CVSS 7.5). Oracle's August 2026 CPU advisory addresses it; no exploit or root-cause details are provided in the documents.