---
id: "CVE-2026-101741"
kind: "vulnerability"
aliases: ["CVE-2026-101741"]
title: "Oracle Agile Engineering Data Management: unauthenticated attacker reads critical data over segment"
severity: "medium"
cvss: 5.3
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["engineering-data-management", "on-prem", "oracle-agile", "vendor"]
not_affected_if: ["no-physical-segment-access"]
published_at: "2026-10-20T22:18:29+00:00"
first_seen_at: "2026-10-23T21:57:23+00:00"
updated_at: "2026-10-25T04:23:09+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-101741", "first_seen_at": "2026-10-23T21:57:23+00:00"}]
---

# Oracle Agile Engineering Data Management: unauthenticated attacker reads critical data over segment

Oracle Agile Engineering Data Management version 6.2.1 has a flaw in its Engineering Communication Interface component. An unauthenticated attacker on the physical communication segment attached to the hardware can gain unauthorized access to critical data.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check whether Oracle Agile Engineering Data Management is deployed at version `6.2.1`
- unknown

## Fix

- Apply the Oracle Critical Patch Update fix for Oracle Agile Engineering Data Management, moving off `6.2.1`
- unknown

## Timeline

- 2026-10-23T21:57:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-101741

## From the sources

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface).   The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Agile Engineering Data Management executes to compromise Oracle Agile Engineering Data Management.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Agile Engineering Data Management accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_