EUVD-2026-79906
GHSA-j9c8-g3wj-qf79
Severity by source
AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Adjacent-segment precondition and a hard-to-control bypass condition justify AV:A with AC:H and PR:N; data read/write with no availability loss.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile PLM executes to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Agile PLM accessible data as well as unauthorized access to critical data or complete access to all Oracle Agile PLM accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
AnalysisAI
Adjacent-network attackers can bypass authentication in Oracle Agile PLM 9.3.6 (Application Server component), gaining the ability to read, create, delete, or modify any data the PLM application can reach. The flaw is unauthenticated per its CVSS vector (PR:N) but only reachable from the physical communication segment attached to the host running Agile PLM, and Oracle rates it as difficult to exploit (AC:H) with a 6.8 base score affecting confidentiality and integrity only. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The precondition is network adjacency: the attacker must have access to the physical communication segment attached to the hardware where Oracle Agile PLM executes, which in practice means the same VLAN, switch segment, or directly attached network as the Agile PLM Application Server - internet-facing exposure alone is not sufficient. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N, 6.8) is internally consistent with Oracle's wording: the attacker needs no credentials and no user interaction, but must already sit on the Layer 2 segment attached to the Agile PLM host and must satisfy a difficult-to-control condition, which caps the practical exposure well below a typical internet-facing pre-auth flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Oracle's remediation path is documented in the Critical Security Patch Update advisory at https://www.oracle.com/security-alerts/cspusep2026.html - apply the Agile PLM 9.3.6 patch set referenced there and confirm the exact fixed build with Oracle Support, since the input data does not include a specific fix version number, so follow the advisory rather than any assumed build. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today