This vulnerability in Oracle Hyperion Calculation Manager (version 11.2.25.0.000) allows a low privileged attacker with network access via HTTP to perform unauthorized update, insert, or delete operations on some accessible data, as well as unauthorized read access to a subset of accessible data. The CVSS 3.1 base score is 5.4, reflecting low complexity attack with low privileges required and no user interaction. The vulnerability affects confidentiality and integrity but not availability. Oracle's August 2026 Critical Security Patch Update advisory references many patches but does not explicitly confirm patch availability for this specific CVE in the provided data.

Successful exploitation can lead to unauthorized modification (update, insert, delete) and unauthorized reading of some data accessible through Oracle Hyperion Calculation Manager version 11.2.25.0.000. This compromises confidentiality and integrity of affected data but does not impact system availability.

Oracle strongly recommends applying security patches without delay as part of their Critical Security Patch Update program. However, the provided advisory content does not explicitly confirm a patch for CVE-2026-62441. Therefore, users should consult the official Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for the latest patch and remediation information. Until a patch is confirmed and applied, restrict network access to Oracle Hyperion Calculation Manager to trusted users and monitor for suspicious activity.