CVE-2026-87260

Received Received - Intake

Privilege Escalation in Oracle Agile Engineering Data Management

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile Engineering Data Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 7.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-87260

EUVD

EUVD-2026-79913

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	agile_engineering_data_management	6.2.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Agile Engineering Data Management version 6.2.1. It allows a low-privileged attacker with physical access to the network segment where the system operates to compromise it. The flaw enables unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all accessible data in the system.

Detection Guidance

Detection requires monitoring network traffic on the physical communication segment where Oracle Agile Engineering Data Management operates. Check for unauthorized data modifications or access attempts to critical data. Ensure network segmentation is enforced and audit logs are reviewed for suspicious activity.

Impact Analysis

If you use Oracle Agile Engineering Data Management 6.2.1, an attacker with physical network access could steal, alter, or delete sensitive engineering data. This could disrupt operations, lead to data breaches, or cause loss of critical product information.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, violating GDPR (data protection) and HIPAA (health information privacy) requirements. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Isolate the affected Oracle Agile Engineering Data Management system from the physical communication segment to prevent unauthorized access. Ensure only trusted users have physical access to the hardware. Apply vendor patches or updates if available from Oracle.

Hi! I’m here to help you understand CVE-2026-87260. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70