CVE-2026-91274 | Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5 Monitoring/Diagnostics SEC improper authorization

October 21, 2026 Yanac

A vulnerability, which was classified as critical, was found in Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5. Affected by this vulnerability is an unknown functionality of the component Monitoring/Diagnostics SEC. The manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-91274. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More