CVE-2026-70920

Oracle Hyperion Financial Management 11.2.25.0.000 has a critical SQL-based Security component flaw (CVSS 9.9) exploitable by low-privileged network attackers, enabling full product takeover with scope impact to other systems. Oracle published advisory CSPAug2026. No exploit code or in-the-wild e...