CVE-2026-70766

An unauthenticated attacker can exploit the Server component of Oracle Hyperion Financial Reporting 11.2.25.0.000 via HTTP to gain unauthorized read and limited write/delete access to application data, requiring human interaction to succeed. Oracle's August 2026 security advisory is the primary r...