Unauthorized Access Vulnerability in Oracle Agile PLM by Oracle
CVE-2026-87257

7.7HIGH

Key Information:

Vendor

Oracle
Status
Oracle Agile Plm
Vendor
CVE Published:
15 September 2026

What is CVE-2026-87257?

A vulnerability exists in Oracle Agile PLM, affecting version 9.3.6, which allows low-privileged attackers with network access via HTTP to exploit the system. This exploitation can lead to unauthorized access to critical data, compromising the integrity of the data handled by Oracle Agile PLM. Although it primarily affects this product, the implications of such attacks could extend to other products as well. If successfully exploited, attackers could gain complete access to all data accessible through Oracle Agile PLM, underscoring a significant risk to organizational data security.

Affected Version(s)

Oracle Agile PLM 9.3.6

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.