CVE-2026-71032

Oracle Commerce 11.4.0's Endeca Application Controller has an easily exploitable, unauthenticated HTTP vulnerability allowing unauthorized read, insert, delete, and update access to data, with CVSS 7.2 (HIGH). No patch or exploit details are provided; monitor Oracle's August 2026 CPU advisory for...