Back to Blogs

Oracle Hyperion Infrastructure: Release 11.2.26 Explained

By Lead Innovative Technologies|7 min read|Oracle Hyperion

While Oracle Cloud EPM ships monthly updates, on-premises Hyperion infrastructure moves on a quieter, quarterly rhythm, and the latest one matters more than most. Release 11.2.26, published July 30, 2026, is the version currently supported for Oracle Enterprise Performance Management System 11.2, and it carries a security change and a platform migration timeline that every Hyperion administrator should have on their calendar.

This summary is based on Oracle's official Release 11.2.26 Readme. If your organization still runs on-premises HFM, Planning, Essbase, or FDMEE, this is the update to review before your next patching window.

What Release 11.2.26 Actually Is

Release 11.2.26 is a Quarterly Release Update, distributed as an OPatch bundle covering the individual EPM System components. It is cumulative: it rolls in every update since Release 11.2.15, and it can be applied directly on top of any release from 11.2.15 onward. Teams still on Release 11.1.2.x have to move to 11.2.8 first, then follow the standard update path forward.

Component versions bundled with this release:

  • Essbase: 21.8.1 (unchanged from 11.2.25)
  • Java: 8 Update 491
  • WebLogic: Patch Set Update 12.2.1.4.260514
  • Application Development Framework (ADF): Bundle Patch 12.2.1.4.260513
  • Oracle HTTP Server 19c: Bundle Patch 12.2.1.4.260312 and 12.2.1.4.260228

Why it matters: If you are moving from 11.2.24 or earlier, this update is your first jump to Essbase 21.8.1, and on SQL Server environments that means a manual ODBC driver update (DataDirect ODBC 7.1.6 to 8.0.2, plus driver path changes in configuration files) that is not applied automatically.

The Security Change Every Admin Needs to Plan For

The most consequential line in this readme is not a feature, it is a deprecation notice: SSO backward compatibility is being removed, effective Release 11.2.27, the update immediately after this one. Oracle is also removing X.509 certificate authentication support as part of the same security tightening.

Why it matters: If your Hyperion environment relies on a single sign-on integration built against the older compatibility mode, or on X.509 client certificates, this is the last quarterly release before that support disappears. Test your SSO configuration against 11.2.26 now, not after 11.2.27 lands.

The VBScript Retirement Is Now a Multi-Year Timeline

Microsoft announced VBScript deprecation on May 22, 2024, and Oracle has been migrating Hyperion Financial Management's rule engine off it in stages ever since. Release 11.2.26 continues on the Native Script Engine introduced in FM 11.2.21, which also renamed the server process toofmserver.exe and improved array handling. The full published timeline:

  • 11.2.21 (April 2025): Native Script Engine becomes the default on Windows.
  • 11.2.22 (July 2025) and 11.2.23 (October 2025): Both engines remain available on Windows; Linux gets Native Script Engine support.
  • 11.2.31 (October 2027): Native Engine becomes the default, VBScript still present.
  • 11.2.39 (October 2029): The Microsoft Script Engine is removed entirely.

Why it matters: Three years feels distant, but HFM rules built and tuned around VBScript behavior do not migrate themselves. Any custom rule logic, especially anything doing string handling, array manipulation, or relying on VBScript-specific quirks, is worth an audit well before 11.2.39.

HFM: No New Features, a Long Fix List

Financial Management gets no functional additions in 11.2.26, but a substantial set of defect fixes, including:

  • Data extract performance issues that surfaced after prior upgrades
  • Native Script Engine compatibility problems and VBScript/BSL rule engine memory issues
  • A Web-03 XML External Entity (XXE) injection vulnerability, closed in this release
  • Journal creation and extraction errors, including duplicate records on extract
  • Schema upgrade failures and security file loading errors
  • Smart View drill-through errors

Why it matters:The XXE fix in particular is a security patch, not a convenience fix, and belongs in the same priority tier as the SSO deprecation notice above when you are scoping this quarter's patching work.

Planning, Workspace, and the Accessibility Pass

Planning picks up four fixes in this release: menu focus handling inside workspaces, keyboard navigation inside data forms, and Map Reporting failures that showed up after previous upgrades. Separately, an ADF bundle patch increases row heights and spacing across HFM, FDMEE, Planning, and Financial Reports to meet Oracle Accessibility Guidelines.

Why it matters: The accessibility spacing change is cosmetic but visible, users will see fewer rows per page on the affected screens and more scrolling, which is worth a heads-up to your finance users before this reaches Production rather than after.

Carried-Forward Features Worth Knowing About

Two changes introduced in Release 11.2.25 remain the headline features carried into 11.2.26:

  • Oracle Database@AWS support. EPM applications are now supported running against Oracle Database on Amazon Web Services, an option for organizations consolidating infrastructure onto AWS while staying on Oracle Database underneath.
  • Essbase Administration Services Lite (EAS Lite) deprecation. Deprecated as of Essbase 21c, and it will not be available at all in Essbase 26.x or later. Administration is consolidating into the Essbase Web Platform UI.

Why it matters: Any team still using EAS Lite for day-to-day Essbase administration should treat this update as the trigger to plan the move to the Web Platform UI, rather than waiting until an Essbase version upgrade forces the issue.

Post-Upgrade Actions You Cannot Skip

  • FDMEE redeployment is required after upgrading to Release 11.2.26 or later, so that the ODI SUPERVISOR account picks up the current WebLogic Administrator password.
  • Essbase ODBC configuration on SQL Server environments needs manual driver and path updates, it is not applied automatically as part of the patch.
  • Known issues in this release include Oracle HTTP Server log purging during startup (which can affect auditing), Essbase rollback issues involving 21.8.1 metadata, and distributed deployments where the WebLogic URL can point to the wrong host after upgrade. Review the full Known Issues section before you schedule the change window.

What This Means for Hyperion Infrastructure Teams

Release 11.2.26 is a quiet update by design, that is the point of Oracle's Applications Unlimited commitment to Hyperion EPM 11.2, with support running through at least 2030 and no forced major upgrade in sight. But quiet does not mean skippable. Between the SSO backward compatibility removal landing next quarter, an active security fix in HFM, and a multi-year VBScript retirement already in motion, this is exactly the kind of release that rewards a structured quarterly patch-review process instead of a scramble when 11.2.27 arrives.

If your team does not already have a documented process for reviewing Hyperion quarterly updates, testing SSO and custom rule logic before each one lands, and validating FDMEE and Essbase configuration after, that gap is exactly what our Hyperion On-Premise Infrastructure team is built to close. And if you are newly joined and building AMS fundamentals on the Cloud EPM side of the house, our Oracle EPM AMS Practitioner Workshop covers the same read-the-update-and-plan-around-it habit for PBCS, EPBCS, FCCS, ARCS, EDMCS, and Narrative Reporting.

Want help planning your move to Release 11.2.26, testing SSO ahead of 11.2.27, or reviewing what this update changes for your HFM, Planning, or Essbase environment? Lead Innovative Technologies can walk your team through it.