Access and Security Vulnerability in Oracle Hyperion Data Relationship Management
CVE-2026-87139

7.5HIGH

Key Information:

Vendor

Oracle
Status
Oracle Hyperion Data Relationship Management
Vendor
CVE Published:
15 September 2026

What is CVE-2026-87139?

A vulnerability has been identified in Oracle Hyperion Data Relationship Management that could be exploited by a low-privileged attacker with network access via HTTP. This access control vulnerability presents a significant risk, allowing unauthorized users to gain control over critical data management systems. The supported version affected by this vulnerability is 11.2.26.0.000. Successful exploitation of this flaw could lead to a full compromise of the Oracle Hyperion Data Relationship Management system, highlighting the importance of applying necessary security patches and mitigations promptly.

Affected Version(s)

Oracle Hyperion Data Relationship Management 11.2.26.0.000

References

https://www.oracle.com/security-alerts/cspusep2026.html
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.