CVE-2026-71078

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM MCAD Connector version 3.6

Description A flaw in the CAX Client component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. Exploitation is difficult and requires human interaction from a user other than the attacker. A successful attack could lead to unauthorized read, update, insert, or delete access to specific data, as well as a partial denial of service (partial DOS), which is a condition where some services of the application become unavailable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.