The vulnerability identified as CVE-2026-61195 affects Oracle Agile Engineering Data Management version 6.2.1. It allows an attacker with low privileges and network access via TCP to cause the application to hang or crash repeatedly, resulting in a complete denial of service. The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high impact on availability. The vulnerability is classified under CWE-400 (Uncontrolled Resource Consumption). The vendor advisory from Oracle's July 2026 Critical Patch Update mentions the product and version but does not explicitly state a patch or fix for this vulnerability. Therefore, patch status is not yet confirmed.

Successful exploitation of this vulnerability results in unauthorized ability to cause the Oracle Agile Engineering Data Management application to hang or crash repeatedly, leading to a complete denial of service. There is no impact on confidentiality or integrity of data. The availability impact is rated high, reflected in the CVSS score of 6.5.

Patch status is not yet confirmed — check the Oracle July 2026 Critical Patch Update advisory for current remediation guidance. Oracle strongly recommends applying security patches promptly when available and remaining on actively supported versions. Until an official patch is released, monitor Oracle advisories for updates. No vendor advisory states that no action is required or that the issue is already mitigated.