CVE-2026-71076

Analyzed Analyzed - Analysis Complete

Unauthenticated Data Read in Oracle Agile PLM MCAD Connector

Publication date: 2026-08-18

Last updated on: 2026-08-24

Assigner: Oracle

Description

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-24

Generated

2026-09-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-71076

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	agile_plm_mcad_connector	3.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Agile PLM MCAD Connector version 3.6. It allows an unauthenticated attacker with network access via HTTP to potentially read a subset of data from the system. The impact is limited to unauthorized data access without affecting integrity or availability.

Detection Guidance

Detection may involve checking for unauthorized access attempts or unusual network traffic patterns targeting Oracle Agile PLM MCAD Connector. Inspect HTTP logs for unexpected requests to the CAX Client component. Ensure network monitoring tools are configured to flag connections from untrusted sources.

Impact Analysis

An attacker could exploit this to read sensitive data stored in the Oracle Agile PLM MCAD Connector. This may include product designs, configurations, or other proprietary information depending on what data is accessible.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, potentially violating GDPR (if personal data is accessed) or HIPAA (if protected health information is compromised). Organizations must assess data exposure risks and implement mitigations.

Mitigation Strategies

Immediately apply the latest security patches from Oracle for version 3.6 of the Agile PLM MCAD Connector. Restrict network access to the CAX Client component via firewalls or network segmentation. Monitor for suspicious activity and consider disabling HTTP access if not required.

Hi! I’m here to help you understand CVE-2026-71076. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70