This vulnerability affects Oracle Agile Engineering Data Management version 6.2.1. It allows an attacker with low privileges and network access via TCP to cause the application to hang or crash repeatedly, resulting in a complete denial of service. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no impact on confidentiality or integrity, and high impact on availability (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). The vulnerability is categorized under CWE-400 (Uncontrolled Resource Consumption). The vendor advisory from Oracle does not explicitly confirm a patch for this specific vulnerability but strongly recommends applying Critical Patch Updates without delay.

Successful exploitation results in a denial of service condition by causing the Oracle Agile Engineering Data Management application to hang or crash repeatedly. This impacts the availability of the service but does not compromise confidentiality or integrity of data. The medium severity score reflects the significant availability impact but limited scope of the vulnerability.

Oracle has not explicitly confirmed a dedicated patch for CVE-2026-61194 in the provided advisory. However, Oracle strongly recommends that customers remain on actively supported versions and apply Critical Patch Updates promptly to address this and other vulnerabilities. Users of Oracle Agile Engineering Data Management version 6.2.1 should monitor Oracle's Critical Patch Update advisories and apply relevant patches as soon as they become available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.