Threats Tagged 'cve-2026-70676'

CVE-2026-70676 is a high-severity vulnerability in Oracle Hyperion Calculation Manager version 11.2.25.0.000. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical or accessible data, unauthorized read access to some data, and partial denial of service. The vulnerability is rated with a CVSS 3.1 base score of 7.0, indicating significant confidentiality, integrity, and availability impacts. No official patch or remediation guidance is explicitly stated in the vendor advisory, but Oracle strongly recommends applying security patches promptly to mitigate risks. The vulnerability is difficult to exploit and no known exploits in the wild have been reported.