CVE-2026-87233 is a security vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. It allows a high privileged attacker with network access via HTTP to compromise the product, potentially gaining unauthorized access to critical data and causing a partial denial of service. The vulnerability impacts confidentiality and availability but not integrity. The CVSS 3.1 base score is 7.6 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L). Oracle has included a fix for this vulnerability in its September 2026 Critical Security Patch Update, which contains 673 security patches across multiple products including Oracle Hyperion Financial Management.

Exploitation of this vulnerability can result in unauthorized access to critical data within Oracle Hyperion Financial Management and the ability to cause a partial denial of service. The vulnerability affects confidentiality and availability, with no impact on integrity. The scope of impact may extend to additional products beyond Oracle Hyperion Financial Management due to the nature of the vulnerability.

Oracle has released a security patch addressing this vulnerability as part of the September 2026 Critical Security Patch Update. Customers are strongly advised to apply the available patches promptly to mitigate the risk. Oracle recommends remaining on actively-supported versions and applying security patches without delay. No alternative mitigations or workarounds are specified in the advisory.