CVE-2026-71046

HighCVSS 8.8

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

Vulnerability in Oracle Agile PLM (component: Security) affects version 9.3.6. A low-privileged attacker with local access to the infrastructure can take over the product. Attacks may impact additional products (scope change). CVSS 8.8.

Risk Assessment

Risk includes full system takeover, potentially leading to confidentiality, integrity, and availability breaches, and affecting other products.

Recommendation

Apply vendor patches for version 9.3.6 and restrict local access to the infrastructure.

Original NVD description (English source)

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agile PLM. While the vulnerability is in Oracle Agile PLM, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).