This vulnerability affects Oracle Hyperion Infrastructure Technology, specifically version 11.2.25.0.000. It is an easily exploitable flaw that permits unauthenticated attackers with network access over HTTP to compromise the system. Successful exploitation can lead to full takeover of the Oracle Hyperion Infrastructure Technology instance. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Oracle has published an advisory referencing this vulnerability as part of its August 2026 Critical Security Patch Update, which includes numerous security fixes across Oracle products.

An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain complete control over Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. This results in full compromise of confidentiality, integrity, and availability of the affected system, potentially allowing takeover of the infrastructure technology component.

Oracle has released security patches addressing this vulnerability as part of its August 2026 Critical Security Patch Update. Customers are strongly advised to apply the relevant patches promptly to remediate this issue. Oracle recommends remaining on actively-supported versions and applying security patches without delay. Patch availability details can be found in Oracle's official advisory at https://www.oracle.com/security-alerts/cspuaug2026.html.