What is the CVSS score of CVE-2026-71081?

CVE-2026-71081 has a CVSS 3.1 base score of 1.9 (Low). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.1%.

Oracle Agile PLM MCAD Connector CVE-2026-71081

EUVD-2026-62026 LOW

Improper Access Control (CWE-284)

2026-08-18 secalert_us@oracle.com

GHSA-mqp4-cjcp-3j5x

Authentication Bypass Oracle Agile Plm Mcad Connector

1.9

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

1.9 LOW

AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N

vuln.today AI

1.9 LOW

Local attack vector and high privilege requirement reflect mandatory infrastructure logon with an admin account; high complexity reflects non-trivial exploitation conditions; only limited integrity impact documented with no confidentiality or availability loss.

3.1 AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N

4.0 AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 19, 2026 - 04:39 vuln.today

DescriptionCVE.org

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Agile PLM MCAD Connector accessible data. CVSS 3.1 Base Score 1.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N).

AnalysisAI

Local integrity compromise in Oracle Agile PLM MCAD Connector 3.6 (CAX Client component) requires an attacker with high privileges and physical or logical logon access to the host infrastructure, under high-complexity conditions, to perform unauthorized data modification against accessible records. The attack yields only limited integrity impact - no confidentiality or availability loss - and no public exploit code or active exploitation has been identified at time of analysis. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	Exploitation requires local logon access to the infrastructure host where Oracle Agile PLM MCAD Connector executes - remote network-based exploitation is not possible per AV:L. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Real-world risk is minimal. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Apply the Oracle Critical Patch Update for August 2026, which addresses this vulnerability per the advisory at https://www.oracle.com/security-alerts/cspuaug2026.html. … Detailed patch versions, workarounds, and compensating controls in full report.