CVE-2026-71089

Oracle Agile PLM MCAD Connector CAX Client version 3.6 is vulnerable: an unauthenticated attacker with local infrastructure access can exploit it (low complexity, human interaction required) to gain unauthorized read access to a subset of accessible data. CVSS 3.3 LOW; no exploitation observed. O...