This vulnerability affects Oracle Agile PLM MCAD Connector version 3.6. It allows a low privileged attacker who has logon access to the infrastructure where the product executes to compromise the product and cause a partial denial of service. The CVSS 3.1 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and impact limited to availability only (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L). No confidentiality or integrity impact is reported. The vendor advisory references Oracle's Critical Security Patch Update for August 2026 but does not explicitly confirm a patch for this specific vulnerability in the provided content.

Successful exploitation results in unauthorized ability to cause a partial denial of service of Oracle Agile PLM MCAD Connector. There is no impact on confidentiality or integrity. The low CVSS score (3.3) reflects limited impact focused on availability disruption only.

Patch status is not yet confirmed — check the vendor advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly as part of their Critical Security Patch Update process. Until a patch is applied, restrict logon access to the infrastructure where Oracle Agile PLM MCAD Connector executes to trusted users only.