CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

Browse vulnerabilities by package

CISA KEV catalog updated: (v2026.10.26)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-87198
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A difficult-to-exploit unauthenticated attack via HTTP can allow modification and unauthorized access to critical data. CVSS 3.1 Base Score 7.4.

CVE-2026-87197
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can access critical data and modify some data. CVSS 3.1 Base Score 8.2.

CVE-2026-87196
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can access critical data and modify some data. CVSS 3.1 Base Score 8.2.

CVE-2026-87195
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A difficult-to-exploit unauthenticated attack via TLS can allow modification and unauthorized access to critical data. CVSS 3.1 Base Score 7.4.

CVE-2026-87194
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can access critical data. CVSS 3.1 Base Score 7.5.

CVE-2026-87193
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with network access via HTTP can access critical data. CVSS 3.1 Base Score 7.5.

CVE-2026-87192
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data and cause a partial denial of service (partial DoS).

CVE-2026-87191
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data or all accessible data and cause a partial denial of service (partial DoS).

CVE-2026-87190
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A difficult to exploit vulnerability allows a low privileged attacker with network access via HTTP to take over Oracle Hyperion Financial Management.

CVE-2026-87187
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. An unauthenticated attacker with access to the physical communication segment attached to the hardware running the system can take over Oracle Hyperion Financial Management.

CVE-2026-87185
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.

CVE-2026-87183
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A high privileged attacker with logon to the infrastructure running the system can take over Oracle Hyperion Financial Management; the attack requires human interaction and may significantly impact additional products (scope change).

CVE-2026-87182
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with logon to the infrastructure running the system can take over Oracle Hyperion Financial Management; the attack may significantly impact additional products (scope change).

CVE-2026-87181
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.

CVE-2026-87180
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.

CVE-2026-87179
High

Vulnerability in the Security component of Oracle Hyperion Financial Management version 11.2.26.0.000. A low privileged attacker with network access via HTTP can take over Oracle Hyperion Financial Management.

CVE-2026-87178
High

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A high-privileged attacker with network access via SQL can easily exploit this flaw. Successful attacks can result in unauthorized creation, deletion, or modification of data and unauthorized access to data, and may impact additional products (scope change).

CVE-2026-87177
High

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A low-privileged attacker with network access via HTTP can easily exploit this flaw. Successful attacks can result in unauthorized access to data and unauthorized update, insert, or delete of data, and may impact additional products (scope change).

CVE-2026-87174
High

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. An unauthenticated attacker with network access via TCP can easily exploit this flaw. Successful attacks can result in unauthorized access to data and unauthorized update, insert, or delete of data.

CVE-2026-87171
High

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.26.0.000. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to compromise the system. Successful attacks can result in unauthorized creation, deletion, or modification of data and unauthorized access to data, and may impact additional products (scope change).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS