CVE-2026-91277

A vulnerability exists in the E1 IOT Orchestrator Security component of Oracle JD Edwards EnterpriseOne Orchestrator (versions 9.2.0.0-9.2.26.5 ). An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the system, potentially gaining unauthorized read access ...

CVE-2026-91276

The JD Edwards EnterpriseOne Orchestrator product by Oracle JD Edwards (component: E1 IOT Orchestrator Security ) is affected by a vulnerability in versions 9.2.0.0-9.2.26.5 . An unauthenticated attacker with network access via HTTP can exploit this high-complexity vulnerability, which requires h...

CVE-2026-91274

A vulnerability exists in the Monitoring and Diagnostics SEC component of Oracle JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5). A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation may lead to un...

CVE-2026-91273

A high-severity vulnerability exists in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards , specifically within the Object and Env Tech SEC component. This issue affects supported versions 9.2.0.0 through 9.2.26.5 . An unauthenticated attacker with network access via HTTP can easily...

CVE-2026-91271

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a vulnerability in the Monitoring and Diagnostics SEC component, specifically in versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can exploit this to compromise the system, potentially...

CVE-2026-91270

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a vulnerability in the Monitoring and Diagnostics SEC component. Impacted versions range from 9.2.0.0 to 9.2.26.5 . This is an easily exploitable vulnerability that allows a low-privileged attacker with network access ...

CVE-2026-91268

A vulnerability exists in the Web Runtime SEC component of JD Edwards EnterpriseOne Tools (versions 9.2.0.0-9.2.26.5) provided by Oracle JD Edwards. A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the software, potentially resulting in a complete ...

CVE-2026-91269

A vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC ) affects versions 9.2.0.0-9.2.26.5 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation ...

CVE-2026-91265

The JD Edwards EnterpriseOne Tools product by Oracle JD Edwards is affected by a critical vulnerability in the Enterprise Infrastructure SEC component. This issue impacts supported versions 9.2.0.0 through 9.2.26.5 . An unauthenticated attacker with network access via HTTP can easily exploit this...

CVE-2026-91264

A vulnerability exists in the Security component of Oracle PeopleSoft Enterprise SCM Manufacturing version 9.2 . A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation can lead to unauthorized update, insert, ...

CVE-2026-91263

A vulnerability exists in the Notification Configuration component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61-8.63 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-trigger vulnerability to compromise the PeopleTools product. Successf...

CVE-2026-91261

The Oracle WebCenter Content product (specifically the Content Server component) in version 14.1.2.0.0 is affected by a vulnerability. A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the product, potentially resulting in unauthorized...

CVE-2026-91262

The Oracle WebCenter Content product (component: Content Server ) is affected by a vulnerability in version 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw, though successful exploitation requires human interaction from a user other than the attacker. T...

CVE-2026-91260

The iProcurement product of Oracle E-Business Suite is affected by a vulnerability in the E-Content Manager Catalog component, specifically in supported versions 12.2.3-12.2.15 . A high-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potenti...

CVE-2026-91257

A vulnerability exists in the iSupport product of Oracle E-Business Suite within the Service Requests component. Affected versions include 12.2.3 through 12.2.15 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise iSupport. Successful explo...

CVE-2026-91259

A vulnerability exists in the OIM Legacy UI component of the Oracle Identity Manager product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the Oracle...

CVE-2026-91256

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitation can lead to a complete Denial of Service (DoS) , characterized by a hang or frequently r...

CVE-2026-91255

A vulnerability exists in the Kernel component of Oracle Solaris version 11.4 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to cause a system hang or a frequently repeatable crash, leading to a complete Denial of Service (DoS) . Exploitation deta...

CVE-2026-91254

A vulnerability exists in the Kernel component of Oracle Solaris version 11.4 . This easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to cause a hang or a frequently repeatable crash, resulting in a complete Denial of Service (DoS) . No specific exploit deta...

CVE-2026-91252

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to cause a complete Denial of Service (DoS) by inducing a hang or a frequently repeatable crash. Additionally, the vulnerability ...