EUVD-2026-79867
GHSA-w58q-mv25-34hr
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Network-reachable unauthenticated flaw with no user interaction, but high complexity reflects a state- or timing-dependent SQL path; availability unaffected.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SQL to compromise Oracle Hyperion Financial Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
AnalysisAI
Oracle Hyperion Financial Management 11.2.26.0.000 exposes a Security-component flaw that lets an unauthenticated remote attacker with network access create, delete, or modify critical financial consolidation data and read the full contents of the application's accessible data set. Exploitation is rated difficult (CVSS 3.1 7.4, AV:N/AC:H/PR:N/UI:N), implying a timing-, state-, or query-construction dependency rather than a one-shot request. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to have network reachability to the HFM service path that accepts the SQL-mediated request, and the target must be the specific supported build 11.2.26.0.000 with the Security component in its default, unmodified state - no credentials and no user interaction are required per AV:N/AC:H/PR:N/UI:N. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signal set is thin but internally consistent: CVSS 3.1 scores 7.4 with AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N, meaning no credentials and no user interaction are needed, but the attacker must land a high-complexity exploit against a reachable service - a real constraint that separates this from a script-kiddie mass-scan target, even though a mid-sized municipal IT team in inowroclaw running HFM for budget consolidation should still treat it as urgent once the patch is verified in their environment. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary fix is the vendor patch: apply the Oracle Critical Security Patch Update associated with this CVE as documented at https://www.oracle.com/security-alerts/cspusep2026.html, which supersedes the currently supported 11.2.26.0.000 build - the input did not specify a distinct post-patch version number, so confirm the exact target build in that advisory before scheduling the change window rather than assuming a version. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today