CVE-2026-87210 is a security vulnerability in Oracle Hyperion Financial Management (version 11.2.26.0.000) that allows an unauthenticated attacker with physical network segment access to compromise the system. Successful exploitation can result in unauthorized creation, deletion, or modification of critical data, unauthorized access to all data accessible by the product, and partial denial of service. The vulnerability has a CVSS 3.1 score of 8.3 with attack vector requiring adjacent network access, low attack complexity, no privileges or user interaction needed, and high confidentiality and integrity impact with low availability impact. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes numerous security patches across many products including Oracle Hyperion Financial Management.

The vulnerability allows unauthorized attackers with access to the physical communication segment to gain unauthorized creation, deletion, or modification rights over critical data, full access to all data accessible by Oracle Hyperion Financial Management, and the ability to cause partial denial of service. This compromises confidentiality, integrity, and availability of the affected system.

Oracle has released a Critical Security Patch Update in September 2026 that addresses this vulnerability. Customers are strongly advised to apply the security patches promptly and remain on actively supported versions. No additional mitigation steps are specified beyond applying the official Oracle patches.