THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-71028 (HIGH 7.8) — Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with

[NVD] CVE-2026-71028 (HIGH 7.8) — Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with

mednvdPublished 2026-08-18

CVE-2026-71028 CVSS: 7.8 HIGH Published: 2026-08-18T21:18:02.383

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Commerce Guid

Indicators of compromise

CVE-2026-71028cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-71028