What is the CVSS score of EUVD-2026-79596?

EUVD-2026-79596 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H.

Oracle EUVD-2026-79596

| CVE-2026-83244 HIGH

2026-09-15 secalert_us@oracle.com

GHSA-63gh-vhgm-32m4

Authentication Bypass Oracle

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 21:28 vuln.today

CVE Published

Sep 15, 2026 - 20:18 nvd

HIGH 7.1

DescriptionNVD

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Forge). The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Commerce Guided Search / Oracle Commerce Experience Manager executes to compromise Oracle Commerce Guided Search / Oracle Commerce Experience Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data as well as unauthorized update, insert or delete access to some of Oracle Commerce Guided Search / Oracle Commerce Experience Manager accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Commerce Guided Search / Oracle Commerce Experience Manager. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H).

AnalysisAI

Oracle Commerce Guided Search / Oracle Commerce Experience Manager 11.4.0 (Forge component) can be compromised by an unauthenticated attacker who already sits on the same physical network segment as the host, yielding full read access to application data, limited data manipulation, and a repeatable denial-of-service condition. Oracle rates the flaw CVSS 7.1 (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H), reflecting that it is reachable only from an adjacent segment and is difficult to trigger reliably. …