# CVE-2026-87260: Oracle Agile Engineering Data Management local data tampering via physical segment

Source: https://junglewise.ai/threats/cve-2026-87260-oracle-agile-engineering-data-management-local-data-tampering-via  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-15. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-87260 · Severity: high · CVSS 7.3 · Published 2026-09-15

Oracle Agile Engineering Data Management is a product used to manage engineering data and communications within Oracle's supply chain suite. A vulnerability in the Engineering Communication Interface component allows an attacker with physical access to the network segment and low-level privileges to read, modify, or delete sensitive engineering data, potentially impacting data integrity and confidentiality across the system.

Technologies: [Oracle Agile Engineering Data Management](https://junglewise.ai/threats/technologies/agile-engineering-data-management). Vendors: [Oracle](https://junglewise.ai/threats/vendors/oracle).

## Quick answers

**Is CVE-2026-87260 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-87260 being exploited in the wild.

**How severe is CVE-2026-87260?** High severity, with a CVSS score of 7.3, published 15 September 2026.

**Which products and versions are affected?** Oracle Agile Engineering Data Management 6.2.1.

**Is there a fix for CVE-2026-87260?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-87260 attacked?** It is attacked from the adjacent network.

**Am I affected by CVE-2026-87260?** Check whether you run Oracle Agile Engineering Data Management at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability is a local network-based access control issue in the Engineering Communication Interface component of Oracle Agile Engineering Data Management 6.2.1. The vulnerability requires an attacker to have both adjacent network access (AV:A) to the physical communication segment and low privileges (PR:L), but no user interaction (UI:N). Successful exploitation allows unauthorized creation, deletion, modification, and access to critical data, with high impact on both confidentiality (C:H) and integrity (I:H). No availability impact is noted. The vulnerability is considered easily exploitable despite these preconditions. Patch status or mitigation guidance is not clearly documented in the advisory text.

## Affected products

- Oracle Agile Engineering Data Management 6.2.1

## Timeline

- 2026-09-15: disclosed

## References

- [https://www.oracle.com/security-alerts/cspusep2026.html](https://www.oracle.com/security-alerts/cspusep2026.html)

## Related threats

- [Oracle Agile Engineering Data Management physical access data integrity vulnerability](https://junglewise.ai/threats/cve-2026-101746-vulnerability-in-the-oracle-agile-engineering-data-management)
- [Oracle Agile Engineering Data Management information disclosure in Engineering Communication Interface](https://junglewise.ai/threats/cve-2026-101745-vulnerability-in-the-oracle-agile-engineering-data-management)
- [Oracle Agile Engineering Data Management unauthorized data access and denial of service](https://junglewise.ai/threats/cve-2026-101744-vulnerability-in-the-oracle-agile-engineering-data-management)
- [Oracle Agile Engineering Data Management physical access data breach in Engineering Communication Interface](https://junglewise.ai/threats/cve-2026-101741-vulnerability-in-the-oracle-agile-engineering-data-management)
- [Oracle Agile Engineering Data Management privilege escalation in Engineering Communication Interface](https://junglewise.ai/threats/cve-2026-101739-vulnerability-in-the-oracle-agile-engineering-data-management)