CVE-2026-71088

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM MCAD Connector version 3.6

Description A flaw in the CAX Client component allows a low-privileged attacker with network access via HTTP to compromise the system. Exploitation is difficult and requires human interaction from a user other than the attacker. A successful attack can lead to unauthorized access to critical data or complete access to all accessible data within the Oracle Agile PLM MCAD Connector.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.