A vulnerability in Oracle Hyperion Data Relationship Management version 11.2.26.0.0 allows a low privileged attacker with network access via HTTP to gain unauthorized access to critical data. The vulnerability impacts confidentiality but does not affect integrity or availability. It has a CVSS 3.1 base score of 7.7, indicating high severity. Oracle has included this vulnerability in its September 2026 Critical Security Patch Update, which provides patches for this and many other vulnerabilities.