This vulnerability in Oracle Hyperion Infrastructure Technology (version 11.2.25.0.000) permits an unauthenticated attacker with network access over HTTP to compromise the system, resulting in unauthorized access to critical or all accessible data. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) reflects that the attack can be performed remotely with low complexity, no privileges, and no user interaction, impacting confidentiality severely but not integrity or availability. The vulnerability is related to the Installation and Configuration component of the product. Oracle has published a Critical Security Patch Update advisory for August 2026 but does not explicitly confirm a patch for this specific vulnerability in the provided advisory content.

Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible through Oracle Hyperion Infrastructure Technology version 11.2.25.0.000. The confidentiality of sensitive information is severely impacted, but there is no direct impact on integrity or availability according to the CVSS vector.

Oracle strongly recommends applying security patches promptly as part of their Critical Security Patch Update process. Although the advisory mentions a large set of patches in the August 2026 update, it does not explicitly confirm a patch for CVE-2026-62550. Therefore, users should consult the Oracle Critical Security Patch Update advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for the latest patch availability and installation instructions. Until a patch is applied, restrict network access to the affected Oracle Hyperion Infrastructure Technology instance to trusted sources only.