What is the CVSS score of EUVD-2026-79826?

EUVD-2026-79826 has a CVSS 3.1 base score of 8.7 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N. EPSS exploitation probability: 0.3%.

Oracle EUVD-2026-79826

| CVE-2026-87171 HIGH

2026-09-15 secalert_us@oracle.com

GHSA-r32v-hqx9-rhrh

Authentication Bypass Oracle

8.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.7 HIGH

AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Sep 15, 2026 - 21:01 vuln.today

CVE Published

Sep 15, 2026 - 20:19 nvd

HIGH 8.7

DescriptionNVD

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Financial Management. While the vulnerability is in Oracle Hyperion Financial Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Financial Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N).

AnalysisAI

Unauthenticated attackers who can reach the Oracle Hyperion Financial Management 11.2.26.0.000 Security component over HTTPS can bypass its authentication controls and gain read and write access to critical financial data, with the exploit's impact crossing into other integrated Oracle EPM products (scope change). Oracle rates this CVSS 3.1 8.7 (AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N), explicitly noting it is difficult to exploit; no public exploit code or CISA KEV entry was present in the supplied intelligence, and no EPSS score was provided. …