CVE-2026-71021

Oracle Commerce 11.4.0, component Endeca Application Controller, is vulnerable to a network-accessible, low-complexity attack requiring only low privileges and user interaction. Successful exploitation yields high confidentiality impact and low integrity impact with scope change. Oracle's August ...