CVE-2026-87218

Analyzed Analyzed - Analysis Complete

Unauthenticated Network Access in Oracle Hyperion Financial Management

Publication date: 2026-09-15

Last updated on: 2026-09-21

Assigner: Oracle

Description

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Hyperion Financial Management executes to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Hyperion Financial Management. CVSS 3.1 Base Score 8.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-21

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-87218

EUVD

EUVD-2026-79873

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	hyperion_financial_management	11.2.26.0.000

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with access to the physical network segment where the software runs can exploit it to compromise the system. The attack can lead to unauthorized changes to critical data or cause the system to crash repeatedly.

Detection Guidance

This vulnerability affects Oracle Hyperion Financial Management version 11.2.26.0.000 and requires physical network access to exploit. Detection should focus on identifying unpatched instances of this software version on your network. Check for Oracle Hyperion Financial Management services running on affected systems and verify patch levels.

Impact Analysis

If exploited, this vulnerability allows attackers to modify or delete critical data, access all data within Oracle Hyperion Financial Management, or cause the system to crash repeatedly, leading to downtime and data loss.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, which may violate compliance requirements for GDPR (data integrity and confidentiality) and HIPAA (protected health information integrity). Organizations using this software may face regulatory penalties or legal consequences.

Mitigation Strategies

Apply the latest Oracle Hyperion Financial Management patches immediately. Isolate the Oracle Hyperion Financial Management system from untrusted networks. Restrict physical access to the hardware where this software executes. Monitor for unusual data access patterns or system crashes.

Hi! I’m here to help you understand CVE-2026-87218. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70