Threats tagged 'ghsa-f25w-cg92-fw9v'

A critical vulnerability (CVE-2026-87214) exists in Oracle Hyperion Financial Management version 11.2.26.0.000. It allows a high-privileged attacker with network access via HTTP to fully compromise the product, impacting confidentiality, integrity, and availability. The vulnerability may also affect additional Oracle products due to scope change. The CVSS 3.1 base score is 9.1, indicating a critical severity. Oracle has released security patches as part of its September 2026 Critical Security Patch Update.