CVE-2026-87262

Received Received - Intake

Unauthenticated Access in Oracle Agile Engineering Data Management

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: Oracle

Description

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-15

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-87262

EUVD

EUVD-2026-79915

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	agile_engineering_data_management	6.2.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Agile Engineering Data Management version 6.2.1. It allows an unauthenticated attacker with physical access to the network segment where the system runs to exploit it. The flaw enables unauthorized access to sensitive data and potential modifications to some data.

Detection Guidance

Detection requires monitoring network traffic for unauthorized access attempts to the Oracle Agile Engineering Data Management physical communication segment. Check for unusual data requests or modifications to critical files. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized access to critical or all accessible data in the system. It may also allow attackers to insert, update, or delete data, potentially causing data breaches or integrity issues.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations using this software may face legal and regulatory penalties due to potential data breaches.

Mitigation Strategies

Isolate the affected system from the physical communication segment. Apply vendor patches if available. Restrict network access to the hardware. Monitor for suspicious activity and unauthorized data access.

Hi! I’m here to help you understand CVE-2026-87262. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70