PULSEUnderground Intel

EN VIVO34señales / 24h

FEED

ransomwhitearmor reclama a wagyu.xyz · Retail & E-Commerceransomdirewolf reclama a GRUPO PETROIL · MX · Energy & Utilitiesransombooba project reclama a RCOA- Regent Christian Online Academy · CA · Educationransombooba project reclama a Kerckstede vzw · BE · Otherransombooba project reclama a BASS Medical Group · US · Healthcareransombooba project reclama a Hudson River Museum · US · Educationransombooba project reclama a Horizon Eye Specialists & LASIK Center · US · Healthcareransombooba project reclama a Aesthetic Specialty Centre · PK · Healthcareransombooba project reclama a City of Big Spring · US · Government & Defenseransombooba project reclama a KING FAMILY MEDICAL · US · Healthcareransombooba project reclama a Charter Township of Commerce · US · Government & Defenseransombooba project reclama a Regent Christian Online Academy · CA · Educationransomaurora reclama a GreenbergFarrow · Professional Servicesransomwallstreet reclama a Bristol City Council · GB · Government & Defenseransomwhitearmor reclama a wagyu.xyz · Retail & E-Commerceransomdirewolf reclama a GRUPO PETROIL · MX · Energy & Utilitiesransombooba project reclama a RCOA- Regent Christian Online Academy · CA · Educationransombooba project reclama a Kerckstede vzw · BE · Otherransombooba project reclama a BASS Medical Group · US · Healthcareransombooba project reclama a Hudson River Museum · US · Educationransombooba project reclama a Horizon Eye Specialists & LASIK Center · US · Healthcareransombooba project reclama a Aesthetic Specialty Centre · PK · Healthcareransombooba project reclama a City of Big Spring · US · Government & Defenseransombooba project reclama a KING FAMILY MEDICAL · US · Healthcareransombooba project reclama a Charter Township of Commerce · US · Government & Defenseransombooba project reclama a Regent Christian Online Academy · CA · Educationransomaurora reclama a GreenbergFarrow · Professional Servicesransomwallstreet reclama a Bristol City Council · GB · Government & Defense

← Todos los CVEs

CVE Watch25 ago 2026

CVE-2026-71072

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is

CVSS

3.3

Bajo

EPSS

0.1%

p3

KEV

—

Exploit Today

1

0-100

Publicado: 18 ago 2026 · Última mod.: 25 ago 2026 · CWE-284

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-09-282026-10-26

Descripción técnica

Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Agile PLM MCAD Connector. CVSS 3.1 Base Score 3.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).

Referencias oficiales

www.oracle.comhttps://www.oracle.com/security-alerts/cspuaug2026.html

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-829864.6 MED

———The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have that permission.4h CVE-2026-829844.3 MED

———When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member of ..."), but the resources API endpoint could still be called directly, allowing any authenticated non-member to enumerate the team's internal resources and their identifiers. This does not grant access to the contents of the discovered resources themselves, only their existence, names, and identifiers.4h CVE-2026-771734.3 MED

———A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as confidential.4h CVE-2026-771713.5 BAJ

———A public shared collective always allowed recipients of the link to create pages.4h CVE-2026-674003.5 BAJ

———A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.4h CVE-2026-1175127.3 ALT

———A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee_insert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.4h