CVE-2026-71087

CVE-2026-71087 affects the CAX Client component of Oracle Agile PLM MCAD Connector version 3.6 (Oracle Supply Chain). An unauthenticated attacker with network access via HTTP can exploit this with low complexity to gain unauthorized read access to a subset of the product's accessible data. The im...

CVE-2026-71079

...

CVE-2026-71079

Oracle MySQL Connector/ODBC 26.7.0 is affected by a network-accessible DoS vulnerability exploitable by low-privileged attackers, causing hangs or crashes with no confidentiality or integrity impact (CVSS 3.1:6.5, availability-only). No exploitation details provided; monitor Oracle's August 2026 ...

CVE-2026-71078

Oracle Agile PLM MCAD Connector (component: CAX Client, version 3.6) has a local privilege escalation vulnerability requiring low privileges, high attack complexity, and human interaction. Successful exploitation yields unauthorized read/write/delete access to a subset of data and partial DoS. CV...

CVE-2026-71078

...

CVE-2026-71076

...

CVE-2026-71075

Affected product is Oracle Agile PLM MCAD Connector (CAX Client) version 3.6. Attack requires physical network-segment access and is rated MEDIUM (CVSS 5.9). Impact: unauthorized data access and limited data modification. Oracle's August 2026 CPU patch is referenced; no exploit code or in-the-wil...

CVE-2026-71069

...

CVE-2026-71067

Affected: Oracle Agile PLM MCAD Connector v3.6 (CAX Client component). Root cause: Not specified in the documents. Impact: CVSS 8.8 (High) — a low-privileged, network-reachable attacker via HTTP can achieve full compromise (confidentiality, integrity, availability) and takeover of the connector. ...

CVE-2026-71064

...

CVE-2026-71050

...

CVE-2026-71046

...

CVE-2026-71048

...

CVE-2026-71044

...

CVE-2026-71043

Oracle Agile PLM 9.3.6 (Security component) has an unauthenticated, network-reachable flaw exploitable via HTTP. CVSS 3.1 scores it HIGH (7.5, C:H), allowing unauthorized access to critical or all accessible data. No exploitation or patch details are provided; see Oracle's August 2026 CPU advisor...

CVE-2026-71044

Oracle Agile PLM (Oracle Supply Chain, component: Export ) version 9.3.6 is affected by a vulnerability that allows a low-privileged attacker with network access via HTTP to achieve full takeover of the application. The CVSS 3.1 score is 8.8 (HIGH) with impacts to confidentiality, integrity, and ...

CVE-2026-71043

...

CVE-2026-71041

A HIGH-severity local privilege escalation affects Oracle Agile PLM 9.3.6's Gantt Chart component. A low-privileged attacker with local infrastructure access can compromise the product with full C/I/A impact. Oracle's August 2026 CPU advisory (cspuaug2026.html) is the reference; no patch version ...

CVE-2026-71042

...

CVE-2026-71040

Oracle Agile PLM 9.3.6's Security component allows an unauthenticated, network-accessible attacker to fully compromise the application (C/I/A impact), yielding complete takeover. CVSS 9.8 Critical. No exploit details provided. Oracle's August 2026 CPU advisory is referenced for patch information.