CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.11.04)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-87189
Critical

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows a high-privileged attacker with Oracle Net network access to take over the system, with attacks potentially impacting additional products (scope change). CVSS 3.1 Base Score 9.1.

CVE-2026-87188
Critical

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to fully take over the system. CVSS 3.1 Base Score 9.8.

CVE-2026-87187
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with access to the physical communication segment attached to the hardware running the system can take over Oracle Hyperion Financial Management.

CVE-2026-87186
Critical

Vulnerability in Oracle Hyperion Financial Management (component: Security) affecting version 11.2.26.0.000. An easily exploitable flaw allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running the system to take it over, with attacks potentially impacting additional products (scope change). CVSS 3.1 Base Score 9.6.

CVE-2026-87185
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.

CVE-2026-87184
Critical

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via SQL can easily exploit it, leading to takeover of the system. CVSS 3.1 Base Score 9.8.

CVE-2026-87183
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A high privileged attacker with logon to the infrastructure running the system can take over Oracle Hyperion Financial Management; the attack requires human interaction and may significantly impact additional products (scope change).

CVE-2026-87182
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with logon to the infrastructure running the system can take over Oracle Hyperion Financial Management; the attack may significantly impact additional products (scope change).

CVE-2026-87181
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.

CVE-2026-87180
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.

CVE-2026-87179
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.

CVE-2026-87178
High

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A high-privileged attacker with network access via SQL can easily exploit this flaw. Successful attacks can result in unauthorized creation, deletion, or modification of data and unauthorized access to data, and may impact additional products (scope change).

CVE-2026-87177
High

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can easily exploit this flaw. Successful attacks can result in unauthorized access to data and unauthorized update, insert, or delete of data, and may impact additional products (scope change).

CVE-2026-87176
Critical

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.

CVE-2026-87175
Critical

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.

CVE-2026-87174
High

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can easily exploit this flaw. Successful attacks can result in unauthorized access to data and unauthorized update, insert, or delete of data.

CVE-2026-87173
Critical

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.

CVE-2026-87172
Critical

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can easily exploit it, leading to takeover of the system and potentially impacting other products (scope change). CVSS 3.1 Base Score 9.9.

CVE-2026-87171
High

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful attacks can result in unauthorized creation, deletion, or modification of data and unauthorized access to data, and may impact additional products (scope change).

CVE-2026-87170
Critical

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can easily exploit it, leading to unauthorized creation, deletion, or modification of data and unauthorized access to data. CVSS 3.1 Base Score 9.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS