CVE-2026-70946

Oracle Hyperion Financial Management 11.2.25.0.000 has a Security component flaw; a low-privileged remote attacker can exploit it over HTTP to fully compromise the application (CVSS 7.5, HIGH). Oracle's August 2026 CPU advisory addresses this issue.