CVE-2026-71030

CVE-2026-71030 affects Oracle Commerce 11.4.0 (Endeca Application Controller component). An unauthenticated attacker can exploit it via HTTP to gain unauthorized read/insert/delete access to data, with potential scope change to other products. CVSS 7.2 HIGH. No exploit details or patch info provi...