CVE-2026-71149

Oracle Hyperion Financial Management 11.2.25.0.000 Security component is affected: a low-privileged local attacker can, with human interaction, gain unauthorized data read/write access and partial DoS (CVSS 4.2 MEDIUM). Oracle's CSPR August 2026 advisory provides patch details.