CVE-2026-83260

Received Received - Intake

Remote Code Execution in Oracle Agile PLM

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Event Java PX). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle Agile PLM. While the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83260

EUVD

EUVD-2026-79612

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	agile_plm	9.3.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a critical vulnerability in Oracle Agile PLM version 9.3.6. It allows a high-privileged attacker with network access to take over the system via T3 or IIOP protocols. The flaw enables full compromise of Oracle Agile PLM and may impact other connected products.

Detection Guidance

Detection requires monitoring for unusual network traffic or unauthorized access attempts targeting Oracle Agile PLM via T3 or IIOP protocols. Check for high privileged user activity logs and verify if the system is running version 9.3.6. Use network scanners to detect open T3/IIOP ports (default 7001, 7002).

Impact Analysis

An attacker could gain full control of Oracle Agile PLM, leading to unauthorized access, data theft, or system manipulation. This could disrupt operations, expose sensitive data, or allow further attacks on connected systems.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR or HIPAA requirements for data protection and confidentiality. Organizations may face legal penalties, reputational damage, and loss of compliance certifications.

Mitigation Strategies

Apply the latest security patches from Oracle for Oracle Agile PLM version 9.3.6. Restrict network access to the T3 and IIOP ports used by Oracle Agile PLM. Limit high privileged user access to only necessary personnel. Monitor for unusual activity in Oracle Agile PLM logs.

Hi! I’m here to help you understand CVE-2026-83260. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70