PULSE
ES
FEED
ransomqilin reclama a RaceTrakka · AU · Retail & E-Commerceransomqilin reclama a Smith Feddeler & Smith · US · Professional Servicesransomqilin reclama a Delta Electric Power Association · US · Energy & Utilitiesransomqilin reclama a Bangor Wholesale Laminates · GB · Manufacturingransomqilin reclama a TeleTronic · ES · Technologyransomqilin reclama a FIRMENGRUPPE APPL Holding GmbH · DE · Otherransomqilin reclama a Premier Medical Group · US · Healthcareransomqilin reclama a Zachary Confections · US · Retail & E-Commerceransomqilin reclama a THOMAS JORDAN, P.A · US · Professional Servicesransomqilin reclama a Five Star Sheets · US · Retail & E-Commerceransomqilin reclama a Power Funding · GB · Financial Servicesransomqilin reclama a Mountain Rheumatology · US · Healthcareransomqilin reclama a Taubensee Steel & Wire · DE · Manufacturingransomqilin reclama a Natural Energy Laboratory of Hawaii Authority · US · Energy & Utilitiesransomqilin reclama a RaceTrakka · AU · Retail & E-Commerceransomqilin reclama a Smith Feddeler & Smith · US · Professional Servicesransomqilin reclama a Delta Electric Power Association · US · Energy & Utilitiesransomqilin reclama a Bangor Wholesale Laminates · GB · Manufacturingransomqilin reclama a TeleTronic · ES · Technologyransomqilin reclama a FIRMENGRUPPE APPL Holding GmbH · DE · Otherransomqilin reclama a Premier Medical Group · US · Healthcareransomqilin reclama a Zachary Confections · US · Retail & E-Commerceransomqilin reclama a THOMAS JORDAN, P.A · US · Professional Servicesransomqilin reclama a Five Star Sheets · US · Retail & E-Commerceransomqilin reclama a Power Funding · GB · Financial Servicesransomqilin reclama a Mountain Rheumatology · US · Healthcareransomqilin reclama a Taubensee Steel & Wire · DE · Manufacturingransomqilin reclama a Natural Energy Laboratory of Hawaii Authority · US · Energy & Utilities
← All CVEs
CVE WatchOct 21, 2026

CVE-2026-91310

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC). Supported versions that are

CVSS

8.8

High

EPSS

0.3%

p26

KEV

—

Exploit Today

8

0-100

Published: Oct 20, 2026 · Last modified: Oct 21, 2026

EPSS · 30d
0.3%EPSS · 30 days0.3%
2026-10-212026-10-25
Technical description

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Official references
Related CVEs

No related CVEs by CWE or product.