CVE-2026-91289 | Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5 Monitoring/Diagnostics SEC improper authorization

October 21, 2026 Yanac

A vulnerability was found in Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5 and classified as problematic. Impacted is an unknown function of the component Monitoring/Diagnostics SEC. Executing a manipulation can lead to improper authorization.

This vulnerability appears as CVE-2026-91289. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More