CVE-2026-70996

Oracle Commerce 11.4.0's Endeca Application Controller has an easily exploitable unauthenticated, network-accessible vulnerability (CVSS 8.6 HIGH) allowing unauthorized access to critical or all accessible data; no exploit or patch details are provided. Monitor Oracle's August 2026 security advis...