CVE-2026-91291 | Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5 Business Logic Infra SEC improper authorization

October 21, 2026 Yanac

A vulnerability was found in Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5. It has been declared as problematic. The impacted element is an unknown function of the component Business Logic Infra SEC. The manipulation results in improper authorization.

This vulnerability is known as CVE-2026-91291. Attacking locally is a requirement. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More