CVE-2026-87258 is a vulnerability in Oracle Agile PLM 9.3.6 affecting the Folders, Files & Attachments component. It allows a low privileged attacker with network access via HTTP to potentially gain unauthorized access to critical data or modify some data after successful exploitation, which requires user interaction. The vulnerability impacts confidentiality and integrity but not availability. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities.