CVE-2026-91277 | Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.26.5 E1 IOT Orchestrator Security information disclosure

October 21, 2026 Yanac

A vulnerability was found in Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.26.5. It has been declared as problematic. This issue affects some unknown processing of the component E1 IOT Orchestrator Security. Executing a manipulation can lead to information disclosure.

This vulnerability is handled as CVE-2026-91277. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More