CVE-2026-21946 | Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.0 Web Runtime SEC Remote Code Execution

A vulnerability was found in Oracle JD Edwards EnterpriseOne Tools up to 9.2.26.0. It has been rated as critical. Affected is an unknown function of the component Web Runtime SEC. This manipulation causes Remote Code Execution.

This vulnerability is registered as CVE-2026-21946. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.