A vulnerability was found in Oracle iStore up to 12.2.15. It has been rated as critical. Affected is an unknown function of the component Shopping Cart. This manipulation causes improper privilege management.
This vulnerability is tracked as CVE-2026-60815. The attack is possible to be carried out remotely. No exploit exists.