Unauthenticated Access Vulnerability in Oracle Agile PLM MCAD Connector by Oracle
CVE-2026-71080

3.7LOW

Key Information:

Vendor

Oracle
Status
Oracle Agile Plm Mcad Connector
Vendor
CVE Published:
18 August 2026

What is CVE-2026-71080?

The vulnerability in Oracle Agile PLM MCAD Connector allows an unprivileged attacker who has physical access to the communication segment to exploit the system. This flaw permits unauthorized updates, insertions, or deletions of sensitive data, along with unjustified read access to certain datasets managed by the Oracle Agile PLM MCAD Connector. While successful exploitation necessitates human engagement from a different individual, it still exposes significant risks to the integrity and confidentiality of the data managed by this application.

Affected Version(s)

Oracle Agile PLM MCAD Connector 3.6

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.