CVE-2026-70998

creationtimestamp| type| source ---|---|--- 2026-08-18 22:25:27+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfb3rckqn2t 2026-08-19 08:10:12+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgbr4vswg2u...

CVE-2026-70998

Oracle Commerce 11.4.0 , specifically the Endeca Application Controller component, is affected by a CRITICAL (CVSS 9.3) vulnerability exploitable by an unauthenticated attacker over HTTP with low complexity. The flaw enables unauthorized access to critical data and update/insert/delete operations...