CVE-2026-62535Oracle · Hyperion_infrastructure_technology
Vulnerability data via NVD (ingested)
Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration). The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Hyperion Infrastructure Technology. While the vulnerability is in Oracle Hyperion Infrastructure Technology, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hyperion Infrastructure Technology accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
vuln:CVE-2026-62535product:"Oracle Hyperion Infrastructure Technology" version:"11.2.25.0.000"http.html:"Hyperion Infrastructure Technology"More intel sources (5)
vuln:CVE-2026-62535vulnerabilities.cve_id: CVE-2026-62535CVE-2026-62535CVE-2026-62535"CVE-2026-62535" exploit -site:nvd.nist.gov