CVE-2026-91290 | Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5 Web Runtime SEC improper authorization

October 21, 2026 Yanac

A vulnerability was found in Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5. It has been classified as problematic. The affected element is an unknown function of the component Web Runtime SEC. The manipulation leads to improper authorization.

This vulnerability is traded as CVE-2026-91290. An attack has to be approached locally. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More