Unauthenticated Access Vulnerability in Oracle Agile PLM MCAD Connector by Oracle
CVE-2026-71089

3.3LOW

Key Information:

Vendor

Oracle
Status
Oracle Agile Plm Mcad Connector
Vendor
CVE Published:
18 August 2026

What is CVE-2026-71089?

An unauthenticated access vulnerability exists in Oracle Agile PLM MCAD Connector, specifically within the CAX Client component. This vulnerability permits an attacker with access to the infrastructure where the connector operates to compromise its functionality. Although the exploit requires human interaction from someone other than the attacker, successfully executing the attack may allow unauthorized read access to certain data accessible through Oracle Agile PLM MCAD Connector. It’s crucial for organizations using version 3.6 of this product to be aware of this vulnerability to undertake necessary precautions.

Affected Version(s)

Oracle Agile PLM MCAD Connector 3.6

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.