Oracle Agile PLM MCAD Connector CVE-2026-71069

The attacker must hold low-privileged authenticated access to the Oracle Agile PLM MCAD Connector system and be able to reach it over the network via HTTP - unauthenticated exploitation is not possible per the PR:L CVSS metric. Exploitation is further constrained by high attack complexity (AC:H), meaning specific conditions within the CAX Client component must align for the attack to succeed; the exact trigger conditions are not disclosed in available data. The scope of impact is limited to the connector itself (S:U), with no lateral scope change to adjacent systems indicated. Limiting factors for defenders include: the requirement for prior authenticated access (PR:L), the high complexity barrier (AC:H) reducing ease of exploitation, the absence of user interaction requirements (UI:N) once access is established, and the niche deployment of Oracle Agile PLM MCAD Connector 3.6 in most environments.

The CVSS 3.1 score of 7.5 reflects a meaningful but not trivially exploitable vulnerability. The network attack vector (AV:N) via HTTP expands the attacker population to any network-reachable low-privileged user, while high attack complexity (AC:H) indicates that exploitation requires specific conditions - such as particular system states, timing dependencies, or non-obvious parameter manipulation - that limit opportunistic attacks. The full C:H/I:H/A:H impact underscores the severity if exploitation succeeds. No EPSS data was supplied, making probability-of-exploitation comparison unavailable. The absence of both a KEV listing and any known POC reduces immediate urgency relative to the raw CVSS score. The 'Information Disclosure' tag in the ENISA/Oracle source data conflicts with the complete takeover CVSS impact - security teams should verify the precise exploitation outcome with Oracle's advisory. Real-world risk is moderate: high potential damage if successfully exploited, constrained by required authentication, AC:H exploitation barrier, and the niche deployment footprint of Oracle Agile PLM MCAD Connector.

A low-privileged authenticated user - such as an internal employee or contractor with standard PLM access - sends a specially crafted HTTP request to the Oracle Agile PLM MCAD Connector's CAX Client endpoint. By satisfying the high-complexity exploitation conditions (potentially involving specific request sequencing, system state dependencies, or parameter edge cases), the attacker achieves full control over the connector, gaining the ability to read, modify, or destroy PLM MCAD integration data and disrupt connected workflows. No public exploit code exists at time of analysis, making this scenario more likely in targeted attacks than in opportunistic mass exploitation.