CVE-2026-87245 is a security vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. It allows a low privileged attacker with access to the physical communication segment attached to the hardware running the product to compromise Oracle Hyperion Financial Management. The vulnerability has a CVSS 3.1 base score of 8.0 with attack vector 'Adjacent', low attack complexity, low privileges required, no user interaction, and impacts confidentiality, integrity, and availability. Oracle's September 2026 Critical Security Patch Update includes fixes for this vulnerability among 673 other patches. Oracle strongly recommends applying these patches without delay.

Successful exploitation of this vulnerability can lead to full compromise of Oracle Hyperion Financial Management, affecting confidentiality, integrity, and availability of the system. The attacker requires low privileges and physical network access adjacent to the target system. No known exploits in the wild have been reported as of the advisory date.

Oracle has released a Critical Security Patch Update in September 2026 that addresses this vulnerability. Customers should apply the provided security patches promptly. Oracle strongly recommends remaining on actively supported versions and applying security patches without delay to mitigate this and other vulnerabilities. No alternative mitigations or temporary fixes are indicated in the advisory.