This vulnerability affects Oracle Hyperion Infrastructure Technology component Installation and Configuration in version 11.2.25.0.000. It is easily exploitable remotely without authentication over HTTP, enabling attackers to take over the system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Oracle's August 2026 Critical Security Patch Update advisory references this vulnerability among 943 fixes but does not provide a direct patch link in the input data. Oracle strongly urges applying patches without delay to mitigate exploitation risks.

Successful exploitation can lead to complete takeover of Oracle Hyperion Infrastructure Technology, compromising confidentiality, integrity, and availability of the system. This can result in unauthorized access, data manipulation, and service disruption.

Oracle has released a Critical Security Patch Update in August 2026 that addresses this vulnerability among others. Customers are strongly advised to remain on actively supported versions and apply Oracle security patches promptly. No specific patch link was provided in the input; therefore, users should consult the official Oracle advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for patch availability and installation instructions.