# Vulnerabilities published in 2026 - [CVE-2026-91301](https://insights.sbomify.com/CVE-2026-91301/): Missing authorization in JD Edwards EnterpriseOne Tools (low 3.6) - [CVE-2026-91300](https://insights.sbomify.com/CVE-2026-91300/): Cross-site request forgery in JD Edwards EnterpriseOne Tools (low 3.1) - [CVE-2026-9130](https://insights.sbomify.com/CVE-2026-9130/): Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement (high 7.1) - [CVE-2026-91299](https://insights.sbomify.com/CVE-2026-91299/): Missing authorization in JD Edwards EnterpriseOne Orchestrator (critical 10.0) - [CVE-2026-91298](https://insights.sbomify.com/CVE-2026-91298/): Missing authorization in JD Edwards EnterpriseOne Tools (medium 5.4) - [CVE-2026-91297](https://insights.sbomify.com/CVE-2026-91297/): Missing authorization in JD Edwards EnterpriseOne Tools (medium 6.1) - [CVE-2026-91296](https://insights.sbomify.com/CVE-2026-91296/): Open redirect in JD Edwards EnterpriseOne Tools (high 8.8) - [CVE-2026-91295](https://insights.sbomify.com/CVE-2026-91295/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.8) - [CVE-2026-91294](https://insights.sbomify.com/CVE-2026-91294/): Denial of service in JD Edwards EnterpriseOne Tools (medium 4.3) - [CVE-2026-91293](https://insights.sbomify.com/CVE-2026-91293/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 5.4) - [CVE-2026-91292](https://insights.sbomify.com/CVE-2026-91292/): Information disclosure in JD Edwards EnterpriseOne Localizations (medium 5.4) - [CVE-2026-91291](https://insights.sbomify.com/CVE-2026-91291/): Missing authorization in JD Edwards EnterpriseOne Tools (low 3.6) - [CVE-2026-91290](https://insights.sbomify.com/CVE-2026-91290/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 5.5) - [CVE-2026-9129](https://insights.sbomify.com/CVE-2026-9129/): Path Traversal in Altium Enterprise Server Viewer StorageController Allows Arbitrary File Read (critical 9.4) - [CVE-2026-91289](https://insights.sbomify.com/CVE-2026-91289/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 5.3) - [CVE-2026-91288](https://insights.sbomify.com/CVE-2026-91288/): Missing authorization in JD Edwards EnterpriseOne Tools (high 7.4) - [CVE-2026-91287](https://insights.sbomify.com/CVE-2026-91287/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.1) - [CVE-2026-91286](https://insights.sbomify.com/CVE-2026-91286/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.2) - [CVE-2026-91285](https://insights.sbomify.com/CVE-2026-91285/): Missing authorization in JD Edwards EnterpriseOne Orchestrator (medium 6.5) - [CVE-2026-91284](https://insights.sbomify.com/CVE-2026-91284/): Denial of service in JD Edwards EnterpriseOne Tools (medium 6.5) - [CVE-2026-91283](https://insights.sbomify.com/CVE-2026-91283/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 4.3) - [CVE-2026-91282](https://insights.sbomify.com/CVE-2026-91282/): Missing authorization in JD Edwards EnterpriseOne Tools (medium 5.9) - [CVE-2026-91281](https://insights.sbomify.com/CVE-2026-91281/): Missing authorization in JD Edwards EnterpriseOne Tools (medium 6.1) - [CVE-2026-91280](https://insights.sbomify.com/CVE-2026-91280/): Missing authorization in JD Edwards EnterpriseOne Tools (medium 6.1) - [CVE-2026-9128](https://insights.sbomify.com/CVE-2026-9128/): Studio 5000 Logix Designer® – Multiple Vulnerabilities (high 7.3) - [CVE-2026-91279](https://insights.sbomify.com/CVE-2026-91279/): Missing authorization in JD Edwards EnterpriseOne Tools (medium 6.1) - [CVE-2026-91278](https://insights.sbomify.com/CVE-2026-91278/): Privilege escalation in JD Edwards EnterpriseOne Tools (medium 5.5) - [CVE-2026-91277](https://insights.sbomify.com/CVE-2026-91277/): Information disclosure in JD Edwards EnterpriseOne Orchestrator (medium 5.3) - [CVE-2026-91276](https://insights.sbomify.com/CVE-2026-91276/): Missing authorization in JD Edwards EnterpriseOne Orchestrator (medium 5.3) - [CVE-2026-91275](https://insights.sbomify.com/CVE-2026-91275/): Missing authorization in JD Edwards EnterpriseOne Tools (medium 6.6) - [CVE-2026-91274](https://insights.sbomify.com/CVE-2026-91274/): Missing authorization in JD Edwards EnterpriseOne Tools (medium 6.5) - [CVE-2026-91273](https://insights.sbomify.com/CVE-2026-91273/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.6) - [CVE-2026-91272](https://insights.sbomify.com/CVE-2026-91272/): Missing authorization in JD Edwards EnterpriseOne Tools (high 7.4) - [CVE-2026-91271](https://insights.sbomify.com/CVE-2026-91271/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.1) - [CVE-2026-91270](https://insights.sbomify.com/CVE-2026-91270/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.8) - [CVE-2026-9127](https://insights.sbomify.com/CVE-2026-9127/): Studio 5000 Logix Designer® – Multiple Vulnerabilities (high 7.3) - [CVE-2026-91269](https://insights.sbomify.com/CVE-2026-91269/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.1) - [CVE-2026-91268](https://insights.sbomify.com/CVE-2026-91268/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.8) - [CVE-2026-91267](https://insights.sbomify.com/CVE-2026-91267/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.6) - [CVE-2026-91266](https://insights.sbomify.com/CVE-2026-91266/): Missing authorization in JD Edwards EnterpriseOne Tools (high 8.4) - [CVE-2026-91265](https://insights.sbomify.com/CVE-2026-91265/): Auth bypass in JD Edwards EnterpriseOne Tools (critical 9.1) - [CVE-2026-91264](https://insights.sbomify.com/CVE-2026-91264/): Missing authorization in PeopleSoft Enterprise SCM Manufacturing (low 3.7) - [CVE-2026-91263](https://insights.sbomify.com/CVE-2026-91263/): Missing authorization in PeopleSoft Enterprise PeopleTools (medium 4.9) - [CVE-2026-91262](https://insights.sbomify.com/CVE-2026-91262/): Missing authorization in Oracle WebCenter Content (medium 5.4) - [CVE-2026-91261](https://insights.sbomify.com/CVE-2026-91261/): Information disclosure in Oracle WebCenter Content (low 3.1) - [CVE-2026-91260](https://insights.sbomify.com/CVE-2026-91260/): Privilege escalation in iProcurement (high 7.2) - [CVE-2026-9126](https://insights.sbomify.com/CVE-2026-9126/): Use after free in Chrome (high 8.8) - [CVE-2026-91259](https://insights.sbomify.com/CVE-2026-91259/): Auth bypass in Oracle Identity Manager (high 8.8) - [CVE-2026-91257](https://insights.sbomify.com/CVE-2026-91257/): Information disclosure in iSupport (medium 6.5) - [CVE-2026-91256](https://insights.sbomify.com/CVE-2026-91256/): Denial of service in Oracle Solaris (high 7.1) - [CVE-2026-91255](https://insights.sbomify.com/CVE-2026-91255/): Denial of service in Oracle Solaris (high 7.5) - [CVE-2026-91254](https://insights.sbomify.com/CVE-2026-91254/): Denial of service in Oracle Solaris (high 7.5) - [CVE-2026-91253](https://insights.sbomify.com/CVE-2026-91253/): Privilege escalation in Oracle Solaris (high 7.8) - [CVE-2026-91252](https://insights.sbomify.com/CVE-2026-91252/): Denial of service in Oracle Solaris (high 8.2) - [CVE-2026-91251](https://insights.sbomify.com/CVE-2026-91251/): Missing authorization in Oracle SOA Suite (critical 9.9) - [CVE-2026-91250](https://insights.sbomify.com/CVE-2026-91250/): Privilege escalation in Oracle SOA Suite (critical 9.9) - [CVE-2026-9125](https://insights.sbomify.com/CVE-2026-9125/): Cross-site scripting in Presto Player (medium 6.4) - [CVE-2026-91249](https://insights.sbomify.com/CVE-2026-91249/): Information disclosure in Oracle Solaris (low 3.3) - [CVE-2026-91248](https://insights.sbomify.com/CVE-2026-91248/): Information disclosure in Oracle WebCenter Portal (medium 5.3) - [CVE-2026-91247](https://insights.sbomify.com/CVE-2026-91247/): Denial of service in Oracle WebCenter Portal (medium 5.9) - [CVE-2026-91246](https://insights.sbomify.com/CVE-2026-91246/): Cross-site request forgery in Oracle WebCenter Portal (medium 6.1) - [CVE-2026-91245](https://insights.sbomify.com/CVE-2026-91245/): Missing authorization in Oracle WebCenter Portal (medium 6.5) - [CVE-2026-91244](https://insights.sbomify.com/CVE-2026-91244/): Denial of service in Oracle Solaris (medium 4.7) - [CVE-2026-91243](https://insights.sbomify.com/CVE-2026-91243/): Missing authorization in Oracle Business Process Management Suite (critical 9.6) - [CVE-2026-91242](https://insights.sbomify.com/CVE-2026-91242/): Other in Oracle Solaris (high 7.4) - [CVE-2026-91241](https://insights.sbomify.com/CVE-2026-91241/): Missing authorization in Oracle Business Intelligence Enterprise Edition (critical 9.1) - [CVE-2026-91240](https://insights.sbomify.com/CVE-2026-91240/): Missing authorization in Oracle WebCenter Sites (medium 5.9) - [CVE-2026-9124](https://insights.sbomify.com/CVE-2026-9124/): Information disclosure in Chrome (medium 5.3) - [CVE-2026-91239](https://insights.sbomify.com/CVE-2026-91239/): Missing authorization in Oracle SOA Suite (high 8.8) - [CVE-2026-91238](https://insights.sbomify.com/CVE-2026-91238/): Denial of service in Oracle SOA Suite (high 7.1) - [CVE-2026-91237](https://insights.sbomify.com/CVE-2026-91237/): Missing authorization in Oracle SOA Suite (high 7.5) - [CVE-2026-91236](https://insights.sbomify.com/CVE-2026-91236/): Auth bypass in Oracle SOA Suite (critical 9.8) - [CVE-2026-91235](https://insights.sbomify.com/CVE-2026-91235/): Auth bypass in Oracle SOA Suite (critical 9.8) - [CVE-2026-91234](https://insights.sbomify.com/CVE-2026-91234/): Auth bypass in Oracle SOA Suite (critical 9.8) - [CVE-2026-91233](https://insights.sbomify.com/CVE-2026-91233/): Auth bypass in Oracle SOA Suite (critical 9.8) - [CVE-2026-91232](https://insights.sbomify.com/CVE-2026-91232/): Missing authorization in Oracle SOA Suite (critical 9.9) - [CVE-2026-91231](https://insights.sbomify.com/CVE-2026-91231/): Missing authorization in Oracle SOA Suite (critical 10.0) - [CVE-2026-91230](https://insights.sbomify.com/CVE-2026-91230/): Missing authorization in Oracle SOA Suite (critical 9.3) - [CVE-2026-9123](https://insights.sbomify.com/CVE-2026-9123/): Memory corruption in Chrome (high 7.5) - [CVE-2026-91229](https://insights.sbomify.com/CVE-2026-91229/): Missing authorization in Oracle SOA Suite (high 7.5) - [CVE-2026-91228](https://insights.sbomify.com/CVE-2026-91228/): Missing authorization in Oracle SOA Suite (high 7.1) - [CVE-2026-91227](https://insights.sbomify.com/CVE-2026-91227/): Missing authorization in Oracle SOA Suite (high 7.5) - [CVE-2026-91226](https://insights.sbomify.com/CVE-2026-91226/): Missing authorization in Oracle SOA Suite (high 7.5) - [CVE-2026-91225](https://insights.sbomify.com/CVE-2026-91225/): Missing authorization in Oracle SOA Suite (critical 9.1) - [CVE-2026-91224](https://insights.sbomify.com/CVE-2026-91224/): Missing authorization in Oracle SOA Suite (critical 9.9) - [CVE-2026-91223](https://insights.sbomify.com/CVE-2026-91223/): Missing authorization in Oracle SOA Suite (high 8.8) - [CVE-2026-91222](https://insights.sbomify.com/CVE-2026-91222/): Auth bypass in Oracle Business Process Management Suite (critical 9.9) - [CVE-2026-91221](https://insights.sbomify.com/CVE-2026-91221/): Missing authorization in Oracle SOA Suite (critical 10.0) - [CVE-2026-91220](https://insights.sbomify.com/CVE-2026-91220/): Auth bypass in Oracle Business Process Management Suite (critical 9.8) - [CVE-2026-9122](https://insights.sbomify.com/CVE-2026-9122/): Memory corruption in Chrome (medium 6.5) - [CVE-2026-91219](https://insights.sbomify.com/CVE-2026-91219/): Information disclosure in Oracle SOA Suite (high 8.6) - [CVE-2026-91218](https://insights.sbomify.com/CVE-2026-91218/): Missing authorization in Oracle SOA Suite (critical 9.6) - [CVE-2026-91217](https://insights.sbomify.com/CVE-2026-91217/): Information disclosure in Oracle SOA Suite (high 8.6) - [CVE-2026-91216](https://insights.sbomify.com/CVE-2026-91216/): Missing authorization in Oracle SOA Suite (critical 10.0) - [CVE-2026-91215](https://insights.sbomify.com/CVE-2026-91215/): Missing authorization in Oracle SOA Suite (high 8.8) - [CVE-2026-91214](https://insights.sbomify.com/CVE-2026-91214/): Auth bypass in Oracle SOA Suite (critical 9.8) - [CVE-2026-91213](https://insights.sbomify.com/CVE-2026-91213/): Auth bypass in Oracle Business Process Management Suite (high 8.8) - [CVE-2026-91212](https://insights.sbomify.com/CVE-2026-91212/): Missing authorization in Oracle Identity Manager Connector (high 8.6) - [CVE-2026-91211](https://insights.sbomify.com/CVE-2026-91211/): Missing authorization in Oracle Identity Manager Connector (high 8.7) - [CVE-2026-91210](https://insights.sbomify.com/CVE-2026-91210/): Missing authorization in Oracle WebCenter Content (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/258/