Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). (CVE-2026-87260)
A vulnerability exists in Oracle Agile Engineering Data Management version 6.2.1, specifically in the Engineering Communication Interface component. This vulnerability allows a low-privileged attacker with access to the physical communication segment of the hardware running the software to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by Oracle Agile Engineering Data Management. The CVSS 3.1 base score is 7.3, indicating a high severity with significant confidentiality and integrity impacts.
AI Analysis
Technical Summary
CVE-2026-87260 is a vulnerability in Oracle Agile Engineering Data Management 6.2.1's Engineering Communication Interface. It permits a low-privileged attacker with physical network segment access to compromise the product, resulting in unauthorized creation, deletion, or modification of critical or all accessible data. The vulnerability has a CVSS 3.1 score of 7.3 (AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N), reflecting high confidentiality and integrity impacts without affecting availability.
Potential Impact
An attacker with low privileges and physical access to the communication segment can exploit this vulnerability to gain unauthorized access to critical data or perform unauthorized data modifications within Oracle Agile Engineering Data Management. This could lead to significant data integrity and confidentiality breaches.
Mitigation Recommendations
Oracle has released security patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update. Customers are strongly advised to apply the available patches promptly and remain on actively supported versions. No indication from the vendor advisory suggests that no action is required or that the issue is already mitigated without patching.
Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). (CVE-2026-87260)
Description
A vulnerability exists in Oracle Agile Engineering Data Management version 6.2.1, specifically in the Engineering Communication Interface component. This vulnerability allows a low-privileged attacker with access to the physical communication segment of the hardware running the software to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all data accessible by Oracle Agile Engineering Data Management. The CVSS 3.1 base score is 7.3, indicating a high severity with significant confidentiality and integrity impacts.
CVSS v3.1
Score 7.3high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-87260 is a vulnerability in Oracle Agile Engineering Data Management 6.2.1's Engineering Communication Interface. It permits a low-privileged attacker with physical network segment access to compromise the product, resulting in unauthorized creation, deletion, or modification of critical or all accessible data. The vulnerability has a CVSS 3.1 score of 7.3 (AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N), reflecting high confidentiality and integrity impacts without affecting availability.
Potential Impact
An attacker with low privileges and physical access to the communication segment can exploit this vulnerability to gain unauthorized access to critical data or perform unauthorized data modifications within Oracle Agile Engineering Data Management. This could lead to significant data integrity and confidentiality breaches.
Mitigation Recommendations
Oracle has released security patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update. Customers are strongly advised to apply the available patches promptly and remain on actively supported versions. No indication from the vendor advisory suggests that no action is required or that the issue is already mitigated without patching.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-gp29-84r4-pc2r
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-87260"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aaa07d855bf5e2cf5ea2d3b
Added to database: 09/16/2026, 03:07:04 UTC
Last enriched: 09/16/2026, 03:23:17 UTC
Last updated: 09/16/2026, 03:23:17 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.