CVE-2026-70996

creationtimestamp| type| source ---|---|--- 2026-08-19 16:46:04+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-27 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu3nkorh4i2u...

CVE-2026-70996

...

CVE-2026-70996

Oracle Commerce 11.4.0's Endeca Application Controller has an easily exploitable unauthenticated, network-accessible vulnerability (CVSS 8.6 HIGH) allowing unauthorized access to critical or all accessible data; no exploit or patch details are provided. Monitor Oracle's August 2026 security advis...