THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-61268 (HIGH 8.1) — Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comp

[NVD] CVE-2026-61268 (HIGH 8.1) — Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to comp

mednvdPublished 2026-08-18

CVE-2026-61268 CVSS: 8.1 HIGH Published: 2026-08-18T21:16:57.090

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are 9.2.0.0-9.2.26.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful att

Indicators of compromise

CVE-2026-61268cve
9.2.0.0ipv4
9.2.26.4ipv4

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-61268