CVE-2026-83242 is a vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager version 11.4.0. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized read, insert, update, or delete operations on accessible data and cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 7.3, indicating high severity.