CVE-2026-71069

Oracle's CAX Client (Agile PLM MCAD Connector v3.6) has a network-reachable vulnerability exploitable by a low-privileged attacker via HTTP, enabling full system compromise (C/H/I/A impacts, CVSS 7.5). Oracle's August 2026 CPU advisory is referenced; no patch details or exploitation evidence are ...