THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-71027 (HIGH 7.6) — Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with

[NVD] CVE-2026-71027 (HIGH 7.6) — Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with

mednvdPublished 2026-08-18

CVE-2026-71027 CVSS: 7.6 HIGH Published: 2026-08-18T21:18:02.270

Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Endeca Application Controller). The supported version that is affected is 11.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Commerce

Indicators of compromise

CVE-2026-71027cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-71027