Unauthorized Data Access in Oracle Agile PLM MCAD Connector
CVE-2026-71076

5.3MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Agile Plm Mcad Connector
Vendor
CVE Published:
18 August 2026

What is CVE-2026-71076?

A vulnerability exists in the Oracle Agile PLM MCAD Connector, part of the Oracle Supply Chain product suite, affecting version 3.6. This weakness allows unauthenticated attackers to exploit the system via HTTP, potentially leading to unauthorized read access to sensitive data managed by the Connector. Attackers can leverage this flaw to access data that should remain confidential, highlighting the need for immediate attention to bolster security measures around this product. For more detailed information, refer to the Oracle Advisory.

Affected Version(s)

Oracle Agile PLM MCAD Connector 3.6

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.