CVE-2026-61170 in Agile PLM
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability resides within Oracle Agile PLM version 9.3.6, specifically within the Security component of Oracle Supply Chain. The flaw represents a critical security weakness that can be exploited by unauthenticated attackers who gain network access through HTTP protocols. The CVSS 3.1 base score of 8.1 indicates a high-severity vulnerability that impacts confidentiality, integrity, and availability simultaneously. This classification places the vulnerability in the category of difficult-to-exploit issues, yet still poses significant risk to organizations relying on this platform for product lifecycle management.
The technical nature of this flaw suggests an authentication bypass or access control weakness within the HTTP handling mechanisms of Oracle Agile PLM. Attackers can leverage this vulnerability without requiring any valid credentials or prior authorization, making it particularly dangerous in environments where network exposure is unavoidable. The vulnerability's accessibility via standard HTTP protocols indicates that the attack surface extends to any system with network connectivity to the affected application, potentially encompassing entire enterprise networks if proper segmentation is not implemented.
The operational impact of successful exploitation can be catastrophic for organizations using Oracle Agile PLM, as attackers could achieve complete system compromise and takeover. This level of access would enable malicious actors to manipulate product data, disrupt manufacturing processes, steal sensitive intellectual property, and potentially cause broader supply chain disruptions. The confidentiality impact is high as attackers could gain access to proprietary product information, design specifications, and strategic business data. The integrity impact is equally severe since attackers could modify critical product configurations, engineering data, or quality control parameters that directly affect manufacturing outcomes.
Organizations should implement immediate mitigations including network segmentation to restrict direct internet access to Oracle Agile PLM systems, deployment of web application firewalls to monitor and filter HTTP traffic, and implementation of strict access controls. The vulnerability's classification as a remote code execution risk requires comprehensive monitoring of network traffic for suspicious HTTP requests and anomalous system behavior. Security teams should also consider deploying intrusion detection systems specifically configured to identify exploitation attempts targeting this vulnerability.
This vulnerability aligns with CWE-287 (Improper Authentication) and potentially CWE-312 (Sensitive Data Exposure) within the Common Weakness Enumeration framework, representing a fundamental flaw in the application's authentication mechanisms. From an ATT&CK perspective, this vulnerability maps to T1190 (Exploit Public-Facing Application) and T1071.004 (Application Layer Protocol: DNS), as attackers would leverage publicly accessible HTTP services to initiate compromise. The difficulty of exploitation factor suggests that while the attack requires some technical knowledge, the potential impact makes it a critical priority for remediation. Organizations should also review their patch management processes to ensure timely deployment of Oracle security patches and updates addressing this vulnerability.