CVE-2026-70840

creationtimestamp| type| source ---|---|--- 2026-08-19 17:50:16+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-28 07:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mu4sgtlnur2y...

CVE-2026-70840

...

CVE-2026-70840

A HIGH-severity (CVSS 8.4) flaw exists in Oracle Hyperion Financial Management's Security component, affecting version 11.2.25.0.000. An attacker with low privileges and local access can exploit it to gain unauthorized read/write access to all accessible HFM data, with scope extending beyond the ...