## Summary
CVE-2026-87232 is a vulnerability in Oracle Hyperion Financial Management (Oracle Hyperion), component Security, affecting version 11.2.26.0.000. The NVD description indicates it is easily exploitable and can be triggered by an unauthenticated attacker with access to the physical communication segment attached to the hardware running the product.
## Technical Details
- Affected component: Security (Oracle Hyperion Financial Management)
- Affected version: 11.2.26.0.000
- Attack prerequisites (per NVD): attacker has access to the physical communication segment attached to the execution hardware
- Access requirements (per NVD): PR:N (no privileges required) and UI:N (no user interaction)
- Attack vector (per NVD): AV:A (adjacent/adjacent network context)
- Exploitability: described as easily exploitable
## Affected
- Oracle Hyperion Financial Management 11.2.26.0.000
## Impact
Successful exploitation can lead to:
- Unauthorized creation, deletion, or modification of critical data
- Unauthorized access to critical data or complete access to all data accessible to Oracle Hyperion Financial Management
- Confidentiality impact: C:H
- Integrity impact: I:H
- Availability impact: A:N
## Mitigation
1. Apply the vendor’s security fix/patch for Oracle Hyperion Financial Management version 11.2.26.0.000 (no patch details were available from the provided references).
2. Restrict and monitor access to the physical communication segment connected to the Hyperion host hardware (since the NVD states this is required for exploitation).
3. Implement compensating controls to reduce adjacent-network exposure (consistent with AV:A), and review network segmentation and access control around the Hyperion environment.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N