Vulnerability in Oracle Agile PLM MCAD Connector Affects Oracle Supply Chain
CVE-2026-71072

3.3LOW

Key Information:

Vendor

Oracle
Status
Oracle Agile Plm Mcad Connector
Vendor
CVE Published:
18 August 2026

What is CVE-2026-71072?

A vulnerability has been identified in the Oracle Agile PLM MCAD Connector that may allow a low-privileged attacker with logon access to the execution environment to exploit it. Successful exploitation could lead to unauthorized actions, resulting in a partial denial of service for the affected product, thus impacting its availability. Users are advised to review the Oracle Advisory for potential mitigation steps.

Affected Version(s)

Oracle Agile PLM MCAD Connector 3.6

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.