CVE-2026-87219

CVE-2026-87219 is a high-severity (CVSS 8.4) flaw in the Security component of Oracle Hyperion Financial Management, affecting version 11.2.26.0.000. It is easily exploitable by a low-privileged attacker who already has logon access to the server infrastructure where Hyperion Financial Management runs, meaning it is a local attack vector rather than a remotely exploitable internet-facing bug. A successful exploit lets the attacker fully compromise Hyperion Financial Management and, due to a scope change, can significantly impact additional products beyond HFM itself. The attacker gains unauthorized creation, deletion, or modification of critical data — or complete read access to all data accessible to HFM — with high impact to both confidentiality and integrity (availability is unaffected). No public proof-of-concept exists and the vulnerability is not on the CISA KEV catalog, so exploitation is not known to be occurring.

What to do: Apply the Oracle Critical Patch Update that remediates CVE-2026-87219 to any Hyperion Financial Management 11.2.26.0.000 environments. Enforce least-privilege on local OS and application accounts on servers hosting Hyperion, since exploitation requires local logon with low privileges. Review audit logs for unauthorized data creation, modification, or access in HFM-accessible data and check whether other products sharing that infrastructure were affected via scope change.