CVE-2026-71025

Oracle Commerce 11.4.0 (component: Endeca Application Controller) is vulnerable to an unauthenticated, network-exploitable flaw requiring human interaction (CVSS 6.1, medium). It enables unauthorized read, update, insert, or delete access to application data; no exploit code is publicly known. Or...