CVE-2026-71015

creationtimestamp| type| source ---|---|--- 2026-08-18 22:25:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfb4cjovv2u 2026-08-19 08:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtgccyyfnb2f 2026-08-19 16:49:25+00:00| seen|...

CVE-2026-71015

...

CVE-2026-71015

Oracle Commerce 11.4.0 (Endeca Application Controller) has a critical CVSS 9.1 flaw exploitable by unauthenticated attackers over HTTP, enabling unauthorized data creation, deletion, modification, and full data access; no exploit details are provided, and the Oracle CSP advisory (cspuaug2026.html...