CVE-2026-91266 | Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5 Monitoring/Diagnostics SEC improper authorization

October 21, 2026 Yanac

A vulnerability classified as problematic was found in Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5. This impacts an unknown function of the component Monitoring/Diagnostics SEC. Executing a manipulation can lead to improper authorization.

This vulnerability is registered as CVE-2026-91266. The attack needs to be launched locally. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More