CVE-2026-91287 | Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5 Enterprise Infrastructure SEC improper authorization

October 21, 2026 Yanac

A vulnerability has been found in Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5 and classified as problematic. This issue affects some unknown processing of the component Enterprise Infrastructure SEC. Performing a manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-91287. The attack requires a local approach. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More