CVE-2026-70921

Oracle Hyperion Financial Management 11.2.25.0.000 has a critical Security-component flaw (CVSS 10.0) exploitable by unauthenticated, network-adjacent attackers via TLS, granting unauthorized read/write access to all HFM data; scope change may affect additional Oracle products. Oracle's August 20...