CVE-2026-70831

Oracle HFM 11.2.25.0.000 has an easily exploitable HTTP-based security flaw. A low-privileged, network-attached attacker can gain unauthorized access to critical or all accessible HFM data (CVSS 6.5, Confidentiality: HIGH). Oracle's August 2026 CPU advisory (https://www.oracle.com/security-alerts...