CVE-2026-46943

Oracle Retail EFTLink (Core/Plugin) is affected in versions 21.0.0–25.0.0. A unauthenticated attacker able to access over HTTPS can compromise EFTLink, enabling unauthorized creation, deletion, or modification of data, and broader data access. The CVSS v3.1 base score is 7.4 (Confidentiality and ...