CVE-2026-71072

LowCVSS 3.3

Published: 18/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A low-privileged attacker with logon access can cause a partial denial of service. Easily exploitable.

Risk Assessment

Risk of partial service unavailability, potentially impacting system continuity.

Recommendation

Apply Oracle patches and restrict infrastructure access for low-privileged users.

Original NVD description (English source)

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile PLM MCAD Connector. CVSS 3.1 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).