CVE-2026-70789

Oracle Hyperion Financial Reporting Server (v11.2.25.0.000) is exploitable via HTTP by an unauthenticated attacker requiring human interaction (CVSS 5.9). Oracle's CSA bulletin for August 2026 covers the patch. No exploit code or in-the-wild activity is reported in the provided documents.