# Vulnerabilities published in 2026


- [CVE-2026-87233](https://insights.sbomify.com/CVE-2026-87233/): Missing authorization in Oracle Hyperion Financial Management (high 7.6)
- [CVE-2026-87232](https://insights.sbomify.com/CVE-2026-87232/): Missing authorization in Oracle Hyperion Financial Management (high 8.1)
- [CVE-2026-87231](https://insights.sbomify.com/CVE-2026-87231/): Privilege escalation in Oracle Hyperion Financial Management (high 8.1)
- [CVE-2026-87230](https://insights.sbomify.com/CVE-2026-87230/): Missing authorization in Oracle Hyperion Financial Management (critical 10.0)
- [CVE-2026-8723](https://insights.sbomify.com/CVE-2026-8723/): qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly (medium 6.3)
- [CVE-2026-87229](https://insights.sbomify.com/CVE-2026-87229/): Missing authorization in Oracle Hyperion Financial Management (high 8.2)
- [CVE-2026-87228](https://insights.sbomify.com/CVE-2026-87228/): Missing authorization in Oracle Hyperion Financial Management (high 8.2)
- [CVE-2026-87227](https://insights.sbomify.com/CVE-2026-87227/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-87226](https://insights.sbomify.com/CVE-2026-87226/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-87225](https://insights.sbomify.com/CVE-2026-87225/): Information disclosure in Oracle Hyperion Financial Management (high 7.1)
- [CVE-2026-87224](https://insights.sbomify.com/CVE-2026-87224/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-87223](https://insights.sbomify.com/CVE-2026-87223/): Missing authorization in Oracle Hyperion Financial Management (critical 9.1)
- [CVE-2026-87222](https://insights.sbomify.com/CVE-2026-87222/): Denial of service in Oracle Hyperion Financial Management (high 7.5)
- [CVE-2026-87221](https://insights.sbomify.com/CVE-2026-87221/): Information disclosure in Oracle Hyperion Financial Management (high 7.5)
- [CVE-2026-87220](https://insights.sbomify.com/CVE-2026-87220/): Missing authorization in Oracle Hyperion Financial Management (high 7.1)
- [CVE-2026-8722](https://insights.sbomify.com/CVE-2026-8722/): Net::Async::Statsd::Client versions through 0.005 for Perl allow metric injections (medium 6.5)
- [CVE-2026-87219](https://insights.sbomify.com/CVE-2026-87219/): Missing authorization in Oracle Hyperion Financial Management (high 8.4)
- [CVE-2026-87218](https://insights.sbomify.com/CVE-2026-87218/): Missing authorization in Oracle Hyperion Financial Management (high 8.1)
- [CVE-2026-87217](https://insights.sbomify.com/CVE-2026-87217/): Auth bypass in Oracle Hyperion Financial Management (critical 9.1)
- [CVE-2026-87216](https://insights.sbomify.com/CVE-2026-87216/): Privilege escalation in Oracle Hyperion Financial Management (high 7.8)
- [CVE-2026-87215](https://insights.sbomify.com/CVE-2026-87215/): Denial of service in Oracle Hyperion Financial Management (high 7.5)
- [CVE-2026-87214](https://insights.sbomify.com/CVE-2026-87214/): Privilege escalation in Oracle Hyperion Financial Management (critical 9.1)
- [CVE-2026-87213](https://insights.sbomify.com/CVE-2026-87213/): Missing authorization in Oracle Hyperion Financial Management (high 7.4)
- [CVE-2026-87212](https://insights.sbomify.com/CVE-2026-87212/): SQL injection in Oracle Hyperion Financial Management (high 7.4)
- [CVE-2026-87211](https://insights.sbomify.com/CVE-2026-87211/): Missing authorization in Oracle Hyperion Financial Management (high 7.5)
- [CVE-2026-87210](https://insights.sbomify.com/CVE-2026-87210/): Missing authorization in Oracle Hyperion Financial Management (high 8.3)
- [CVE-2026-8721](https://insights.sbomify.com/CVE-2026-8721/): Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs (critical 9.8)
- [CVE-2026-87209](https://insights.sbomify.com/CVE-2026-87209/): Information disclosure in Oracle Hyperion Financial Management (high 7.1)
- [CVE-2026-87208](https://insights.sbomify.com/CVE-2026-87208/): Missing authorization in Oracle Hyperion Financial Management (high 7.1)
- [CVE-2026-87207](https://insights.sbomify.com/CVE-2026-87207/): SQL injection in Oracle Hyperion Financial Management (high 7.2)
- [CVE-2026-87206](https://insights.sbomify.com/CVE-2026-87206/): Missing authorization in Oracle Hyperion Financial Management (high 7.4)
- [CVE-2026-87205](https://insights.sbomify.com/CVE-2026-87205/): Missing authorization in Oracle Hyperion Financial Management (high 7.5)
- [CVE-2026-87204](https://insights.sbomify.com/CVE-2026-87204/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-87203](https://insights.sbomify.com/CVE-2026-87203/): Privilege escalation in Oracle Hyperion Financial Management (high 7.5)
- [CVE-2026-87202](https://insights.sbomify.com/CVE-2026-87202/): SQL injection in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-87201](https://insights.sbomify.com/CVE-2026-87201/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-87200](https://insights.sbomify.com/CVE-2026-87200/): Missing authorization in Oracle Hyperion Financial Management (high 8.2)
- [CVE-2026-8720](https://insights.sbomify.com/CVE-2026-8720/): HMAC-BLAKE2 final discards message when key length exceeds block size (medium 5.9)
- [CVE-2026-87199](https://insights.sbomify.com/CVE-2026-87199/): Denial of service in Oracle Hyperion Financial Management (high 7.5)
- [CVE-2026-87198](https://insights.sbomify.com/CVE-2026-87198/): Missing authorization in Oracle Hyperion Financial Management (high 7.4)
- [CVE-2026-87197](https://insights.sbomify.com/CVE-2026-87197/): Missing authorization in Oracle Hyperion Financial Management (high 8.2)
- [CVE-2026-87196](https://insights.sbomify.com/CVE-2026-87196/): Missing authorization in Oracle Hyperion Financial Management (high 8.2)
- [CVE-2026-87195](https://insights.sbomify.com/CVE-2026-87195/): Missing authorization in Oracle Hyperion Financial Management (high 7.4)
- [CVE-2026-87194](https://insights.sbomify.com/CVE-2026-87194/): Missing authorization in Oracle Hyperion Financial Management (high 7.5)
- [CVE-2026-87193](https://insights.sbomify.com/CVE-2026-87193/): Missing authorization in Oracle Hyperion Financial Management (high 7.5)
- [CVE-2026-87192](https://insights.sbomify.com/CVE-2026-87192/): Missing authorization in Oracle Hyperion Financial Management (high 7.1)
- [CVE-2026-87191](https://insights.sbomify.com/CVE-2026-87191/): Missing authorization in Oracle Hyperion Financial Management (high 7.1)
- [CVE-2026-87190](https://insights.sbomify.com/CVE-2026-87190/): Privilege escalation in Oracle Hyperion Financial Management (high 7.5)
- [CVE-2026-8719](https://insights.sbomify.com/CVE-2026-8719/): AI Engine 3.4.9 - Authenticated (Subscriber+) Privilege Escalation via Missing Authorization in MCP OAuth Bearer Token (high 8.8)
- [CVE-2026-87189](https://insights.sbomify.com/CVE-2026-87189/): Privilege escalation in Oracle Hyperion Financial Management (critical 9.1)
- [CVE-2026-87188](https://insights.sbomify.com/CVE-2026-87188/): Auth bypass in Oracle Hyperion Financial Management (critical 9.8)
- [CVE-2026-87187](https://insights.sbomify.com/CVE-2026-87187/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-87186](https://insights.sbomify.com/CVE-2026-87186/): Privilege escalation in Oracle Hyperion Financial Management (critical 9.6)
- [CVE-2026-87185](https://insights.sbomify.com/CVE-2026-87185/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-87184](https://insights.sbomify.com/CVE-2026-87184/): SQL injection in Oracle Hyperion Financial Management (critical 9.8)
- [CVE-2026-87183](https://insights.sbomify.com/CVE-2026-87183/): Privilege escalation in Oracle Hyperion Financial Management (high 7.7)
- [CVE-2026-87182](https://insights.sbomify.com/CVE-2026-87182/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-87181](https://insights.sbomify.com/CVE-2026-87181/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-87180](https://insights.sbomify.com/CVE-2026-87180/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-8718](https://insights.sbomify.com/CVE-2026-8718/): Out-of-bounds write in DTLS peer Connection ID getsockopt (`TLS_DTLS_PEER_CID_VALUE`) in Zephyr net sockets/TLS (high 8.4)
- [CVE-2026-87179](https://insights.sbomify.com/CVE-2026-87179/): Privilege escalation in Oracle Hyperion Financial Management (high 8.8)
- [CVE-2026-87178](https://insights.sbomify.com/CVE-2026-87178/): Missing authorization in Oracle Hyperion Financial Management (high 8.7)
- [CVE-2026-87177](https://insights.sbomify.com/CVE-2026-87177/): Missing authorization in Oracle Hyperion Financial Management (high 8.5)
- [CVE-2026-87176](https://insights.sbomify.com/CVE-2026-87176/): Auth bypass in Oracle Hyperion Financial Management (critical 9.1)
- [CVE-2026-87175](https://insights.sbomify.com/CVE-2026-87175/): Auth bypass in Oracle Hyperion Financial Management (critical 9.1)
- [CVE-2026-87174](https://insights.sbomify.com/CVE-2026-87174/): Missing authorization in Oracle Hyperion Financial Management (high 8.2)
- [CVE-2026-87173](https://insights.sbomify.com/CVE-2026-87173/): Auth bypass in Oracle Hyperion Financial Management (critical 9.1)
- [CVE-2026-87172](https://insights.sbomify.com/CVE-2026-87172/): Privilege escalation in Oracle Hyperion Financial Management (critical 9.9)
- [CVE-2026-87171](https://insights.sbomify.com/CVE-2026-87171/): Missing authorization in Oracle Hyperion Financial Management (high 8.7)
- [CVE-2026-87170](https://insights.sbomify.com/CVE-2026-87170/): Auth bypass in Oracle Hyperion Financial Management (critical 9.1)
- [CVE-2026-87169](https://insights.sbomify.com/CVE-2026-87169/): Missing authorization in Oracle Contract Lifecycle Management for Public Sector (medium 6.1)
- [CVE-2026-87168](https://insights.sbomify.com/CVE-2026-87168/): Missing authorization in Oracle Purchasing (high 8.1)
- [CVE-2026-87167](https://insights.sbomify.com/CVE-2026-87167/): Missing authorization in Oracle Purchasing (high 8.1)
- [CVE-2026-87166](https://insights.sbomify.com/CVE-2026-87166/): Missing authorization in Oracle Purchasing (high 8.1)
- [CVE-2026-87165](https://insights.sbomify.com/CVE-2026-87165/): Privilege escalation in Oracle Contract Lifecycle Management for Public Sector (high 8.8)
- [CVE-2026-87164](https://insights.sbomify.com/CVE-2026-87164/): Privilege escalation in Oracle Banking Branch (high 8.0)
- [CVE-2026-87163](https://insights.sbomify.com/CVE-2026-87163/): Privilege escalation in Oracle Purchasing (high 8.8)
- [CVE-2026-87162](https://insights.sbomify.com/CVE-2026-87162/): Privilege escalation in Oracle Contract Lifecycle Management for Public Sector (high 8.8)
- [CVE-2026-87161](https://insights.sbomify.com/CVE-2026-87161/): Missing authorization in Oracle HRMS (India) (high 8.5)
- [CVE-2026-87160](https://insights.sbomify.com/CVE-2026-87160/): Missing authorization in Oracle HRMS (India) (high 7.1)
- [CVE-2026-8716](https://insights.sbomify.com/CVE-2026-8716/): Use of Incorrectly-Resolved Name or Reference in GitLab (medium 4.3)
- [CVE-2026-87159](https://insights.sbomify.com/CVE-2026-87159/): Missing authorization in Oracle HRMS (India) (high 8.1)
- [CVE-2026-87158](https://insights.sbomify.com/CVE-2026-87158/): Missing authorization in Oracle Order Management (high 7.1)
- [CVE-2026-87157](https://insights.sbomify.com/CVE-2026-87157/): Missing authorization in Oracle Order Management (high 8.1)
- [CVE-2026-87156](https://insights.sbomify.com/CVE-2026-87156/): Missing authorization in Oracle Product Hub (high 7.1)
- [CVE-2026-87155](https://insights.sbomify.com/CVE-2026-87155/): Privilege escalation in Oracle Product Hub (high 8.8)
- [CVE-2026-87154](https://insights.sbomify.com/CVE-2026-87154/): Missing authorization in Oracle Product Hub (high 8.1)
- [CVE-2026-87153](https://insights.sbomify.com/CVE-2026-87153/): Missing authorization in Oracle Product Hub (high 8.1)
- [CVE-2026-87152](https://insights.sbomify.com/CVE-2026-87152/): Missing authorization in Oracle Installed Base (high 8.1)
- [CVE-2026-87151](https://insights.sbomify.com/CVE-2026-87151/): Missing authorization in Oracle Bills of Material (high 7.7)
- [CVE-2026-87150](https://insights.sbomify.com/CVE-2026-87150/): Privilege escalation in Oracle Bills of Material (high 8.8)
- [CVE-2026-8715](https://insights.sbomify.com/CVE-2026-8715/): Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath (critical 9.6)
- [CVE-2026-87149](https://insights.sbomify.com/CVE-2026-87149/): Missing authorization in Oracle Contract Lifecycle Management for Public Sector (high 7.1)
- [CVE-2026-87148](https://insights.sbomify.com/CVE-2026-87148/): Denial of service in Oracle Hyperion Data Relationship Management (high 7.5)
- [CVE-2026-87147](https://insights.sbomify.com/CVE-2026-87147/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.7)
- [CVE-2026-87146](https://insights.sbomify.com/CVE-2026-87146/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.1)
- [CVE-2026-87145](https://insights.sbomify.com/CVE-2026-87145/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.3)
- [CVE-2026-87144](https://insights.sbomify.com/CVE-2026-87144/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.6)
- [CVE-2026-87143](https://insights.sbomify.com/CVE-2026-87143/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.4)
- [CVE-2026-87142](https://insights.sbomify.com/CVE-2026-87142/): Missing authorization in Oracle Hyperion Data Relationship Management (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/292/