CVE-2026-91280 | Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5 Web Runtime SEC access control

October 21, 2026 Yanac

A vulnerability categorized as critical has been discovered in Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.5. The affected element is an unknown function of the component Web Runtime SEC. The manipulation results in improper access controls.

This vulnerability was named CVE-2026-91280. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More