CVE-2026-83277
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) affects version 3.6. A low-privileged authenticated attacker with local access can modify, delete, or access critical data. The vulnerability is easily exploitable and may impact additional products (scope change).
Risk Assessment
An attacker can compromise confidentiality and integrity of data in Oracle Agile PLM MCAD Connector and potentially affect related systems. This may lead to unauthorized changes in product data.
Recommendation
Urgently apply Oracle security updates for Oracle Agile PLM MCAD Connector version 3.6. Also restrict local user privileges and monitor data access.
Other vulnerabilities in Oracle Agile PLM MCAD Connector
See all- CVE-2026-83279Medium
Vulnerability in the Oracle Agile PLM MCAD Connector product (component: CAX Client), affecting version 3.6. A low-privileged attacker with logon to the infrastructure where the component executes can gain unauthorized access to critical data or complete access to all accessible data.
- CVE-2026-83274Medium
Vulnerability in the Oracle Agile PLM MCAD Connector product (component: CAX Client), affecting version 3.6. A low-privileged attacker with logon to the infrastructure where the component executes can gain unauthorized access to critical data or complete access to all accessible data.
- CVE-2026-71089Low
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An unauthenticated attacker with logon access can gain unauthorized read access to a subset of data. Requires user interaction.
- CVE-2026-71088Medium
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. Difficult to exploit, requires low privileges, network access (HTTP) and user interaction. Successful attack can allow full access to data.
- CVE-2026-71087Medium
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. Easily exploitable by unauthenticated attacker over network (HTTP). Successful attack can allow unauthorized read access to a subset of data.
- CVE-2026-71083Low
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A high-privileged attacker with logon access can gain unauthorized read access to a subset of data. Requires user interaction and is difficult to exploit.
- CVE-2026-71082Low
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A low-privileged attacker with logon access can gain unauthorized read access to a subset of data. Difficult to exploit.
- CVE-2026-71081Low
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A high-privileged attacker with logon access can gain unauthorized update, insert, or delete access to some data. Difficult to exploit.
- CVE-2026-71080Low
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An unauthenticated attacker with access to the physical communication segment can gain unauthorized update, insert, delete, and read access to some data. Requires user interaction and is difficult to exploit.
- CVE-2026-71078Medium
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw requires login and user interaction; a low-privileged attacker can gain unauthorized access to data and cause partial denial of service.
Original NVD description (English source)
Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. While the vulnerability is in Oracle Agile PLM MCAD Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile PLM MCAD Connector accessible data as well as unauthorized read access to a subset of Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 7.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

