CVE-2026-71033

Oracle Commerce 11.4.0's Endeca Application Controller component is affected by a medium-severity (CVSS 5.5) local vulnerability allowing a low-privileged attacker with infrastructure access to read confidential data; no exploitation evidence or patch details are provided in the documents.