Threats tagged 'ghsa-jqfh-95pg-qhf7'

CVE-2026-83241 is a vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Forge) version 11.4.0. It allows an unauthenticated attacker with network access via HTTP to potentially take over the affected product. Exploitation requires human interaction from a user other than the attacker. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.