CVE-2026-71070

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain component: CAX Client. The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM MCAD Connector...

CVE-2026-71070

...

CVE-2026-71070

Oracle's CAX Client (component of Agile PLM MCAD Connector, version 3.6) is vulnerable to an easily exploitable HTTP-based attack requiring only low privileges, enabling unauthorized access to all accessible data. CVSS 3.1 Base Score 6.5 (MEDIUM). Oracle's August 2026 CPU advisory is the primary ...