CVE-2026-87181

CVE-2026-87181 is a vulnerability in the Security component of Oracle Hyperion Financial Management, affecting supported version 11.2.26.0.000. A low-privileged authenticated attacker with network access via HTTP can exploit it easily to fully compromise the application, impacting confidentiality, integrity, and availability (CVSS 3.1 base score 8.8). Successful exploitation results in a complete takeover of the Hyperion Financial Management environment, which typically holds an organization's consolidated financial reporting data. The flaw is limited to the specific affected version, and organizations running older or patched releases outside that version string should verify their exact build. No public proof-of-concept is known and the vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.

What to do: Apply the Oracle Critical Patch Update that remediates CVE-2026-87181 to any Hyperion Financial Management 11.2.26.0.000 deployment as soon as it is available, since only that version is listed as affected. Restrict HTTP access to the HFM web tier so that only authenticated finance users and trusted networks can reach it, and enforce least-privilege on all HFM accounts. Review logs for anomalous activity by low-privileged accounts, since successful exploitation leads to full application takeover.