CVE-2026-71070

Oracle's CAX Client (component of Agile PLM MCAD Connector, version 3.6) is vulnerable to an easily exploitable HTTP-based attack requiring only low privileges, enabling unauthorized access to all accessible data. CVSS 3.1 Base Score 6.5 (MEDIUM). Oracle's August 2026 CPU advisory is the primary ...