CVE-2026-83135

Name of the Vulnerable Software and Affected Versions Oracle iStore versions 12.2.3 through 12.2.15

Description A flaw in the Shopping Cart component allows a low privileged attacker with network access via HTTP to compromise the system. The attack requires human interaction and can lead to unauthorized access, creation, deletion, or modification of critical data within Oracle iStore. Due to a scope change, the impact may extend to additional products beyond Oracle iStore.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.