← Back to the live CVE advisory feed

CVE-2026-87230: Product identification pending

Severity

10 (CRITICAL)

Vendor

ORACLE

Patch status

Unknown

Published

2026-09-15T20:19:11.513

Modified

2026-09-16T19:41:10.423

Why it matters

This matters because the affected product may be exploitable without valid credentials. Internet-facing deployments should be reviewed first.

Recommended admin actions

• Prioritize validation immediately due to critical CVSS severity.
• Treat internet-facing systems as higher priority.

Technical summary

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).

View the official NVD record for CVE-2026-87230

CVE data is sourced from NVD/CNA records and optional enrichment. Validate against the vendor advisory before taking production action.