Unauthorized Data Access Vulnerability in Oracle Agile PLM MCAD Connector

CVE-2026-71075

What is CVE-2026-71075?

A vulnerability exists in the Oracle Agile PLM MCAD Connector, specifically in the CAX Client component, where unauthorized attackers with access to the physical communication segment may exploit the system. Compromise of the Oracle Agile PLM MCAD Connector can lead to unauthorized access to sensitive data, as well as the ability to update, insert, or delete accessible data. The only requirement for exploitation is physical access to the network segment. This vulnerability emphasizes the need for stringent physical security measures in environments utilizing Oracle Agile PLM solutions.

References