CVE-2026-87200 is a security vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized actions such as creating, deleting, or modifying critical data and causing a partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L), indicating it is remotely exploitable without privileges or user interaction, impacting integrity and availability. Oracle's September 2026 Critical Security Patch Update includes fixes for this vulnerability among 673 patches across multiple products.

Successful exploitation can lead to unauthorized modification of critical data within Oracle Hyperion Financial Management and partial denial of service conditions. There is no confidentiality impact reported. The vulnerability is remotely exploitable without authentication or user interaction, increasing its risk.

Oracle has released a Critical Security Patch Update in September 2026 that addresses this vulnerability. Customers should apply the official patches provided by Oracle without delay to remediate this issue. Oracle strongly recommends remaining on actively supported versions and promptly applying security patches. No alternative mitigations or workarounds are specified in the advisory.