This vulnerability in Oracle Hyperion Financial Management (component: Security) affects version 11.2.26.0.000. It is an easily exploitable network vulnerability that requires no authentication and no user interaction. Successful exploitation results in a denial of service condition by causing the application to hang or crash repeatedly. The CVSS 3.1 base score is 7.5, reflecting a high impact on availability only (CVSS vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update, which includes 673 security patches across various Oracle products. Customers are strongly advised to apply the available patches promptly to mitigate this risk.

The vulnerability allows unauthenticated remote attackers to cause a denial of service (application hang or crash) in Oracle Hyperion Financial Management 11.2.26.0.000. There is no impact on confidentiality or integrity. This can disrupt availability of the affected service, potentially impacting business operations relying on this software.

Oracle has released a Critical Security Patch Update in September 2026 that addresses this vulnerability among others. Customers should apply the official Oracle patches without delay to remediate this issue. Oracle strongly recommends staying on actively supported versions and promptly applying security patches. No alternative mitigations or workarounds are indicated in the advisory.