CVE-2026-70691

HighCVSS 7.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

Vulnerability in Oracle Agile Engineering Data Management (Engineering Communication Interface component) version 6.2.1. An unauthenticated attacker with physical access to the communication segment can take over the system. CVSS 7.5 (Confidentiality, Integrity, Availability impacts).

Risk Assessment

Risk includes complete takeover of Oracle Agile Engineering Data Management, potentially leading to data integrity breach and service disruption.

Recommendation

Secure physical access to infrastructure, apply Oracle patches, and monitor the communication segment.

Original NVD description (English source)

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management. Successful attacks of this vulnerability can result in takeover of Oracle Agile Engineering Data Management. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).