Oracle Agile PLM MCAD Connector CVE-2026-71080

Exploitation requires the attacker to be physically or logically adjacent to the network segment where Oracle Agile PLM MCAD Connector 3.6 is running - this rules out internet-based attacks entirely. Attack complexity is rated High (AC:H), meaning the attacker must overcome non-trivial technical conditions such as precise timing or specific protocol state. Critically, a legitimate user of the MCAD Connector must perform an interactive action (UI:R) during the attack window; exploitation cannot be fully automated. The impact is bounded to partial read and write access to a subset of PLM connector data; no availability impact and no scope change to other system components are possible. These conditions collectively limit exploitation to a narrowly positioned, technically capable, insider-adjacent attacker during an active user session.

The aggregate risk signal for this vulnerability is low. The CVSS 3.1 base score of 3.7 reflects multiple limiting factors: adjacent-network access only (AV:A), high attack complexity (AC:H), and mandatory user interaction (UI:R), all of which substantially reduce exploitability. No EPSS score was provided in the source data, and neither CISA KEV listing nor public proof-of-concept code has been identified. The 'Authentication Bypass' tag adds a marginally elevated concern - bypassing authentication is a more serious root cause than a simple data-exposure bug - but the overall impact ceiling remains low (C:L/I:L/A:N). The scope is unchanged, meaning a successful attacker cannot pivot to other system components. In practical terms, this is unlikely to be a priority for most environments; even a mid-sized municipal IT team in walbrzych would reasonably defer remediation in favour of higher-severity issues, provided network segmentation is already enforced around PLM infrastructure. The primary real-world risk is insider-adjacent threat or supply-chain lab environment exposure rather than internet-facing attack.

An attacker positioned on the same local network segment as a host running Oracle Agile PLM MCAD Connector 3.6 - such as a contractor on a shared engineering VLAN - crafts a protocol-level message exploiting the authentication bypass in the CAX Client. The attack succeeds only when a legitimate user on the target host performs an interactive action (e.g., initiating a data sync), after which the attacker can read a subset of PLM data or inject limited modifications. No public exploit code is available to automate this scenario.