VULNERABILITY INTELLIGENCE

CVE-2026-70978

CVSS score9.1 CRITICAL

EPSS probability0.43%

CISA KEVNot currently listed

Published2026-08-18

Last modified2026-10-22

Description

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Content Acquisition System). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTT…