Oracle Commerce: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Commerce ausnutzen, um die Vertraulichkeit und Integrität zu gefährden.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Mediumbsi:WID-SEC-2026-40923 linked CVEs
Open advisory with all CVEs
More on Commerce
Other advisories
- MediumCVE-2026-111835BjornTech Swish for WooCommerce: fehlende Autorisierung
- MediumCVE-2026-101560Oracle Commerce: Mehrere Schwachstellen
- Not ratedCVE-2026-96901Cart Abandonment Recovery for WooCommerce: Umgehung der Authentifizierung
- Not ratedCVE-2026-15261TI WooCommerce Wishlist: Sicherheitslücke
- Not ratedCVE-2026-111957SUMIT Payment Gateway for WooCommerce: Sicherheitslücke
- Not ratedCVE-2026-109926Productive Commerce: Sicherheitslücke
- Not ratedCVE-2026-96901Cart Abandonment Recovery for WooCommerce: Umgehung der Authentifizierung
- Not ratedCVE-2026-15261TI WooCommerce Wishlist: Sicherheitslücke
Other news entries
- Ahold Delhaize Restoring Services Disrupted by CyberattackNewsSecurityWeek
- Critical BlockStrap flaw lets hackers run code on Magento serversNewsBleepingComputer
- NCSC-2026-0436 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe CommerceNewsNCSC-NL
- Adobe Patches 176 Vulnerabilities Across 11 ProductsNewsSecurityWeek
- CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian RecordsNewsThe Hacker News
- Ninja Forms plugin flaw exploited to hack WordPress sitesNewsBleepingComputer
- CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacksNewsBleepingComputer
- WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEVNewsThe Hacker News
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4092
ID