CVE-2026-91285 | Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.26.5 E1 IOT Orchestrator Security privileges management

October 21, 2026 Yanac

A vulnerability was found in Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.26.5 and classified as problematic. This affects an unknown part of the component E1 IOT Orchestrator Security. Such manipulation leads to improper privilege management.

This vulnerability is traded as CVE-2026-91285. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More