Live › vulnerability › CVE-2026-91284
Go to dashboardOracle JD Edwards EnterpriseOne Tools on UNIX, versions 9.2.0.0 through 9.2.26.5, can be made to hang or repeatedly crash by a low-privileged user sending requests over JDENET. The sources describe an availability impact only, with no confidentiality or integrity loss.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organizations running Oracle JD Edwards EnterpriseOne Tools 9.2.0.0 through 9.2.26.5 on UNIX where users can reach the JDENET service. The sources do not say which deployments are most exposed beyond the network path and low privilege requirement.
No product ranges from the sources yet.
9.2.0.0 through 9.2.26.5 on UNIX servers9.2.26.5 as listed in Oracle's advisoryEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91284")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.