Vulnerability in Oracle Agile PLM MCAD Connector by Oracle
CVE-2026-71083

1.8LOW

Key Information:

Vendor

Oracle
Status
Oracle Agile Plm Mcad Connector
Vendor
CVE Published:
18 August 2026

What is CVE-2026-71083?

A vulnerability exists in the Oracle Agile PLM MCAD Connector, specifically within its CAX Client component. This flaw allows highly privileged attackers who log into the infrastructure where the connector operates to potentially compromise the system. While the exploitation of this vulnerability is challenging, it necessitates human interaction from an individual other than the attacker. If successfully exploited, the attacker can gain unauthorized read access to a portion of the data accessible by the Oracle Agile PLM MCAD Connector.

Affected Version(s)

Oracle Agile PLM MCAD Connector 3.6

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
1.8
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.