CVE-2026-91286 | Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5 Monitoring/Diagnostics SEC improper authorization

October 21, 2026 Yanac

A vulnerability, which was classified as critical, was found in Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5. This vulnerability affects unknown code of the component Monitoring/Diagnostics SEC. Such manipulation leads to improper authorization.

This vulnerability is documented as CVE-2026-91286. The attack can be executed remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More