Threats tagged 'ghsa-j9c8-g3wj-qf79'

CVE-2026-87252 is a vulnerability in Oracle Agile PLM 9.3.6 Application Server component that allows an unauthenticated attacker with access to the physical communication segment to compromise the product. Exploitation can lead to unauthorized creation, deletion, or modification of critical data. The vulnerability has a CVSS 3.1 base score of 6.8, indicating medium severity with high confidentiality and integrity impacts. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, providing patches for affected versions.