## Summary
CVE-2026-87178 is a vulnerability in Oracle Hyperion Financial Management (Oracle Hyperion, component: Security) affecting the supported version 11.2.26.0.000. The NVD description indicates an easily exploitable issue where a high-privileged attacker with network access via SQL can compromise Oracle Hyperion Financial Management.
## Technical Details
- Affected component: Security in Oracle Hyperion Financial Management.
- Attack vector: NETWORK (AV:N).
- Exploitation requires a high privileged attacker and network access via SQL (NVD states PR:H and AC:L).
- The NVD describes outcomes consistent with unauthorized creation, deletion, or modification of access to critical data, and unauthorized access to critical data (or complete access) within the scope of Oracle Hyperion Financial Management accessible data.
## Affected
- Oracle Hyperion Financial Management version 11.2.26.0.000.
## Impact
- Unauthorized creation, deletion, or modification of access to critical data and/or unauthorized access to critical data or complete access to all Oracle Hyperion Financial Management accessible data.
- Scope change is indicated (S:C) with confidentiality and integrity impact (C:H, I:H).
## Mitigation
1. Patch immediately to the vendor-fixed release for Oracle Hyperion Financial Management (no reference patch details were available in the provided material).
2. Restrict network connectivity to the Hyperion SQL interfaces so only trusted systems/users can reach them.
3. Review and reduce privileges for accounts that can reach SQL paths associated with Hyperion, since exploitation is described as requiring PR:H.
4. Monitor for anomalous SQL activity and unexpected data/access changes within Oracle Hyperion Financial Management (specific detection indicators were not provided in the available content).
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N