Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerab…

High CVSS 8.8

CVECVE-2026-71051

First seen2026-08-25 05:16 UTC

Disclosed2026-08-18 21:18 UTC

Last updated2026-08-25 05:16 UTC

Channel statusauto

Summary

Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Product Lifecycle Analytics executes to compromise Oracle Product Lifecycle Analytics. While the vulnerability is in Oracle Product Lifecycle Analytics, attacks may significantly impact additional products (scope cha…

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Sources

NVD DATABASE

Original Links

https://www.oracle.com/security-alerts/cspuaug2026.html

Timeline

2026-08-25 nvd_ingest NVD