EUVD-2026-106640

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication...

EUVD-2026-106553

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise J...

EUVD-2026-106531

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise J...

EUVD-2026-106539

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD...

EUVD-2026-106530

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-91386

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication...

CVE-2026-91299

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise J...

CVE-2026-91277

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise J...

CVE-2026-91285

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD...

CVE-2026-91276

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-91386

A vulnerability exists in the JD Edwards EnterpriseOne Orchestrator product (component: E1 IOT Orchestrator Security ) for supported versions 9.2.0.0-9.2.26.5 . A difficult-to-exploit flaw allows an unauthenticated attacker with access to the physical communication segment attached to the hardwar...

CVE-2026-91299

A vulnerability exists in the JD Edwards EnterpriseOne Orchestrator product by Oracle JD Edwards, specifically affecting the E1 IOT Orchestrator Security component in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise th...

CVE-2026-91285

A vulnerability exists in the E1 IOT Orchestrator Security component of the JD Edwards EnterpriseOne Orchestrator product by Oracle JD Edwards , affecting versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can exploit this issue to compromise the orchestrator, pote...

CVE-2026-91276

The JD Edwards EnterpriseOne Orchestrator product by Oracle JD Edwards (component: E1 IOT Orchestrator Security ) is affected by a vulnerability in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability, which requires h...

CVE-2026-91277

A vulnerability exists in the E1 IOT Orchestrator Security component of Oracle JD Edwards EnterpriseOne Orchestrator (versions 9.2.0.0-9.2.26.5 ). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized read access ...

PT-2026-119830

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 through 9.2.26.5 Description An unauthenticated attacker with network access via HTTP can compromise the JD Edwards EnterpriseOne Orchestrator. This issue allows for a full takeover...

CVE-2026-61265: Improper Access Control

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise ...

CVE-2026-61270: Improper Access Control

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD...

PT-2026-77503

Name of the Vulnerable Software and Affected Versions Oracle JD Edwards EnterpriseOne Orchestrator versions 9.2.0.0 through 9.2.26.4 Description A security flaw in the E1 IOT Orchestrator Security component allows a low privileged attacker with network access via HTTP to compromise the system. Th...

CVE-2025-21552

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards component: E1 IOT Orchestrator Security. Supported versions that are affected are Prior to 9.2.9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD...