CVE-2026-87216

CVE-2026-87216 is a vulnerability in the Security component of Oracle Hyperion Financial Management (HFM), affecting supported version 11.2.26.0.000. It is easily exploitable by a low-privileged attacker who already has logon access to the server infrastructure where HFM executes, requiring no user interaction. A successful attack allows the attacker to compromise the HFM application entirely, with high impact on confidentiality, integrity, and availability (CVSS 3.1 base score 7.8, local attack vector). Affected organizations are enterprises running on-premises Oracle Hyperion Financial Management 11.2.26.0.000, typically large finance departments using it for financial consolidation and close processes. The vulnerability is not in the CISA Known Exploited Vulnerabilities catalog and no public proof-of-concept is known, so there is no evidence of active exploitation.

What to do: Apply the Oracle Critical Patch Update that remediates CVE-2026-87216 to any HFM instance on 11.2.26.0.000 as part of the quarterly CPU cycle. Because exploitation requires a local low-privileged OS account on the HFM host, tightly restrict and audit local logins, service accounts, and interactive access on servers running Hyperion Financial Management. Review HFM and host logs for unexpected privilege changes or configuration modifications by low-privileged accounts.