CVE-2026-71028

creationtimestamp| type| source ---|---|--- 2026-08-19 16:46:57+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...

CVE-2026-71028

...

CVE-2026-71028

Oracle Commerce 11.4.0's Endeca Application Controller component is vulnerable to a local, low-complexity privilege escalation attack (CVSS 7.8 HIGH) allowing a low-privileged attacker to fully compromise the application's confidentiality, integrity, and availability. No specific exploit or remed...