This vulnerability affects Oracle Hyperion Infrastructure Technology component Installation and Configuration in version 11.2.25.0.000. It is easily exploitable remotely without authentication and can lead to unauthorized access to critical data or full data access within the affected product. The CVSS 3.1 base score is 8.6, reflecting a network attack vector with low complexity, no privileges required, no user interaction, and a scope change. The impact is high on confidentiality, with no impact on integrity or availability. The vendor advisory references a Critical Security Patch Update released in August 2026 covering many Oracle products, including Oracle Hyperion versions, but does not explicitly confirm patch availability for this specific CVE.

Successful exploitation can result in unauthorized access to critical data or complete access to all data accessible by Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. The vulnerability affects confidentiality with no reported impact on integrity or availability. The scope change indicates potential impact on additional Oracle products beyond the initially affected component.

Oracle has released a Critical Security Patch Update in August 2026 addressing numerous vulnerabilities across Oracle products, including Oracle Hyperion Infrastructure Technology. Customers are strongly advised to apply the latest security patches promptly and remain on actively supported versions. Since no explicit patch link for CVE-2026-62535 is provided, users should consult the Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for detailed patch availability and installation instructions. No vendor advisory states that no action is required or that the issue is already mitigated.