CVE-2026-71037

Oracle Commerce Experience Manager 11.4.0 has a critical (CVSS 9.3) unauthenticated, network-reachable flaw allowing an attacker to gain unauthorized read/write access to all accessible data, with scope extending to other products. Exploitation requires human interaction; no exploit or scanner co...