Oracle Agile EDM CVE-2026-70691

Exploitation requires unauthenticated access to the physical communication segment (same LAN, VLAN, or broadcast domain) directly attached to the hardware running Oracle Agile EDM 6.2.1 - internet-facing or wide-area network exploitation is not possible given AV:A. The specific targeted subcomponent is the Engineering Communication Interface (ECI). The AC:H metric indicates a secondary technical barrier: exploitation is not straightforward and likely demands precise protocol manipulation, timing, or specific environment state. Exploitation is limited to: (1) attackers with physical or logical adjacency to the EDM host network, (2) targeting version 6.2.1 specifically, and (3) overcoming the high complexity condition. No user interaction is required. These constraints make mass or automated exploitation unlikely, but insider threats or attackers with foothold on the same internal network segment represent realistic threat actors.

The CVSS 3.1 base score of 7.5 (High) is driven by the full C:H/I:H/A:H impact triad, representing complete compromise, but is structurally moderated by two key factors: AV:A limits the attacker to the same physical network segment, and AC:H signals non-trivial exploitation requiring specific conditions such as precise timing, protocol knowledge, or environmental prerequisites. EPSS data is absent from available intelligence, so probabilistic exploitation likelihood cannot be quantified. There is no CISA KEV listing, and no public proof-of-concept has been identified, meaning this is currently a theoretical risk vector. Real-world priority is highest for organizations where untrusted parties or compromised devices could share the same LAN segment as EDM hardware - a scenario most relevant in manufacturing or OT environments with flat network architectures. The ENISA EUVD 'Information Disclosure' tag may reflect incomplete tagging rather than actual impact scope; the description explicitly states full takeover. The high attack complexity meaningfully reduces practical exploitability despite the high base score.

An attacker with access to the same LAN segment or VLAN as the Oracle Agile EDM 6.2.1 server sends specially crafted protocol messages to the Engineering Communication Interface. Despite requiring high attack complexity - likely involving specific protocol knowledge or environmental conditions - no authentication is needed, and a successful exploit yields complete control of the EDM system including read/write access to engineering data and service disruption. No public exploit code exists at time of analysis.