---
id: "CVE-2026-91327"
kind: "vulnerability"
aliases: ["CVE-2026-91327"]
title: "Oracle JD Edwards EnterpriseOne Tools: installation flaw allows takeover from adjacent network"
severity: "high"
cvss: 7.5
epss: 0.00215
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["enterpriseone", "jd-edwards", "on-prem", "oracle", "package"]
not_affected_if: ["isolated-network-segment", "versions-outside-9.2.0.0-9.2.26.5"]
published_at: "2026-10-20T22:20:34+00:00"
first_seen_at: "2026-10-23T21:57:26+00:00"
updated_at: "2026-10-25T12:38:52+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91327", "first_seen_at": "2026-10-23T21:57:26+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-91327", "first_seen_at": "2026-10-25T12:38:52+00:00"}]
---

# Oracle JD Edwards EnterpriseOne Tools: installation flaw allows takeover from adjacent network

Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.26.5 have an Installation Security flaw. An unauthenticated attacker on the physical network segment attached to the host can take over the product, per the sources' description.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Confirm the installed EnterpriseOne Tools release is within 9.2.0.0 to 9.2.26.5 (version check method unknown from sources)
- Check whether the host sits on a segment reachable by untrusted parties (unknown from sources)

## Fix

- Move EnterpriseOne Tools to a release later than 9.2.26.5 per Oracle's advisory (exact fixed version unknown from sources)
- Apply Oracle's Critical Patch Update for the affected release (patch identifier unknown from sources)

## Timeline

- 2026-10-23T21:57:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-91327
- 2026-10-25T12:38:52+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-91327

## From the sources

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security).  Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the JD Edwards EnterpriseOne Tools executes to compromise JD Edwards EnterpriseOne Tools.  Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_