{"id":"CVE-2026-101723","kind":"vulnerability","aliases":["CVE-2026-101723"],"related":[],"title":"Oracle Agile PLM MCAD Connector CAX Client: local takeover after user interaction","description":"Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client).   The supported version that is affected is 3.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM MCAD Connector executes to compromise Oracle Agile PLM MCAD Connector.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of Oracle Agile PLM MCAD Connector. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H).","summary":"Oracle Agile PLM MCAD Connector version 3.6 has a flaw in its CAX Client component. A low-privileged local user who can log on to the host running the connector can take it over if another person performs an action.","severity":"medium","cvss":6.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["mcad-connector","oracle-agile-plm","other","windows"],"not_affected_if":["product-not-installed"],"how_to_check":"- Check whether Oracle Agile PLM MCAD Connector 3.6 is installed on the host; the sources do not give a file path or command.\n- unknown","fix":"- Move Oracle Agile PLM MCAD Connector to a patched release; the sources do not name the fixed version.\n- unknown","status":"open","published_at":"2026-10-20T22:18:27+00:00","first_seen_at":"2026-10-23T21:57:23+00:00","triaged_at":"2026-10-25T03:46:41+00:00","updated_at":"2026-10-25T03:46:41+00:00","category":"other","confidence":0.7,"triage":{"at":"2026-10-25T03:46:41Z","model":"claude-haiku-5-5","output":{"fix":"- Move Oracle Agile PLM MCAD Connector to a patched release; the sources do not name the fixed version.\n- unknown","reach":"local","title":"Oracle Agile PLM MCAD Connector CAX Client: local takeover after user interaction","impact":"high","summary":"Oracle Agile PLM MCAD Connector version 3.6 has a flaw in its CAX Client component. A low-privileged local user who can log on to the host running the connector can take it over if another person performs an action.","category":"other","nicknames":[],"who_cares":["oracle-agile-plm","mcad-connector","windows"],"confidence":0.7,"needs_auth":"yes","worst_case":"Attacker takes over the connector with a local logon and user action","analyst_note":"Find the Oracle security alert or patch for CVE-2026-101723 to get the fixed version and check steps; the sources here give only the NVD summary.","how_to_check":"- Check whether Oracle Agile PLM MCAD Connector 3.6 is installed on the host; the sources do not give a file path or command.\n- unknown","needs_analyst":true,"not_affected_if":["product-not-installed"],"who_is_affected":"Teams running Oracle Agile PLM MCAD Connector 3.6, where users log on to the machine that runs the connector. The sources describe a local attacker with a logon and a second person's action, so internet-only exposure is not indicated. Teams without this product can skip it.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000619,"input_tokens":3514,"output_tokens":535,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-101723':15A,18A '-2026':14A,17A '/av':161C '3.1':148C,160C '3.6':34B,92C '6.7':151C 'action':68B 'affect':90C 'agil':2A,24B,29B,73C,108C,116C,143C 'allow':97C 'anoth':64B 'attack':100C,121C,131C,133C 'avail':155C 'base':149C 'cax':6A,40B,83C 'chain':81C 'client':7A,41B,84C 'compon':42B,82C 'compromis':114C 'confidenti':152C 'connector':5A,21B,32B,58B,76C,111C,119C,146C 'cve':13A,16A 'cvss':147C,157C,159C 'difficult':93C 'execut':112C 'exploit':95C 'flaw':37B 'h':169C 'h/a':168C 'h/i':167C 'h/pr':163C 'host':55B 'human':123C 'impact':156C 'infrastructur':105C 'integr':153C 'interact':12A,124C 'l/ac':162C 'l/ui':164C 'local':8A,47B 'log':51B 'logon':102C 'low':45B,98C 'low-privileg':44B 'mcad':4A,20B,31B,75C,110C,118C,145C 'mcad-connector':19B 'oracl':1A,23B,28B,72C,79C,107C,115C,142C 'oracle-agile-plm':22B 'perform':66B 'person':65B,127C 'plm':3A,25B,30B,74C,109C,117C,144C 'privileg':46B,99C 'product':77C 'r/s':165C 'requir':122C 'result':138C 'run':56B 'score':150C 'success':120C,132C 'suppli':80C 'support':86C 'take':60B 'takeov':9A,140C 'u/c':166C 'user':11A,48B 'vector':158C 'version':33B,87C 'vulner':69C,96C,136C 'window':27B","nicknames":[],"mitigations":[],"who_affected":"Teams running Oracle Agile PLM MCAD Connector 3.6, where users log on to the machine that runs the connector. The sources describe a local attacker with a logon and a second person's action, so internet-only exposure is not indicated. Teams without this product can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:18:27+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101723","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101723","severity":null,"published_at":"2026-10-20T22:18:27+00:00","modified_at":"2026-10-22T16:17:14+00:00","first_seen_at":"2026-10-23T21:57:23+00:00","fetched_at":"2026-10-23T22:28:59+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}