Threat Intelligence Database

CVE-2026-71089 is a low-severity vulnerability in Oracle Agile PLM MCAD Connector version 3.6. It allows an unauthenticated attacker who has logon access to the infrastructure where the product runs to potentially gain unauthorized read access to some accessible data. Exploitation requires human interaction from someone other than the attacker. The vulnerability impacts confidentiality but does not affect integrity or availability.

CVE-2026-71081 is a low-severity vulnerability in Oracle Agile PLM MCAD Connector version 3.6. It allows a high privileged attacker with logon access to the infrastructure where the product runs to perform unauthorized update, insert, or delete operations on some accessible data. The vulnerability is difficult to exploit and impacts data integrity without affecting confidentiality or availability.

CVE-2026-71077 is a medium severity vulnerability in Oracle Agile PLM MCAD Connector version 3.6. It allows an unauthenticated attacker with physical access to the communication segment attached to the hardware running the product to potentially gain unauthorized access to critical or all accessible data. The vulnerability is difficult to exploit and does not require user interaction or privileges. The CVSS 3.1 base score is 5.3, reflecting a high confidentiality impact but no integrity or availability impact. No official patch or remediation level is currently confirmed from the vendor advisory.

CVE-2026-71072 is a vulnerability in Oracle Agile PLM MCAD Connector version 3.6 that allows a low privileged attacker with logon access to the infrastructure to cause a partial denial of service. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 3.3, indicating a low severity issue. There is no explicit vendor patch or remediation level stated in the advisory. Oracle recommends applying security patches promptly as part of their Critical Security Patch Update process.

CVE-2026-71069 is a high-severity vulnerability in Oracle Agile PLM MCAD Connector version 3.6. It allows a low privileged attacker with network access via HTTP to potentially take over the affected product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating significant confidentiality, integrity, and availability impacts. The vulnerability is difficult to exploit due to the required conditions. Oracle has published a Critical Security Patch Update advisory that includes patches for this and many other vulnerabilities.

CVE-2026-71066 is a vulnerability in Oracle Agile PLM MCAD Connector version 3.6 that allows an unauthenticated attacker with access to the infrastructure where the product runs to potentially compromise it. Exploitation requires human interaction from a user other than the attacker. Successful exploitation can lead to unauthorized read, update, insert, or delete access to some accessible data and may cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 4.5, indicating a medium severity level.