CVE-2026-46879: Critical severity Oracle JD Edwards EnterpriseOne Tools vulnerability
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are affected are 9.2.0.0-9.2.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via JDENET to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the JDENET service if it is not required. If JDENET is required, configure it to accept connections only from explicit trusted hosts/networks and harden listening interfaces.
JD Edwards EnterpriseOne Tools (JDENET) JDENET network access / JDENET service = disabled or limited to trusted hosts - Compensating control
Restrict network access to JDENET: block JDENET traffic at the network edge and internal firewalls, allow only trusted management IPs, and place JD Edwards EnterpriseOne Tools servers in an isolated/segmented network zone inaccessible from general networks.
- Operational
Assume compromise is possible for JDENET-exposed systems: review logs and indicators of compromise, isolate any affected systems, and rotate credentials, API keys, and service accounts used by JD Edwards EnterpriseOne Tools and integrated systems.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46879?
CVE-2026-46879 has a critical severity rating of 9.8.
What versions are affected by CVE-2026-46879?
CVE-2026-46879 affects Oracle JD Edwards EnterpriseOne Tools versions 9.2.0.0 to 9.2.26.2.
How do I fix CVE-2026-46879?
To resolve CVE-2026-46879, users should upgrade to a patched version of Oracle JD Edwards EnterpriseOne Tools beyond 9.2.26.2.
What type of access is required to exploit CVE-2026-46879?
CVE-2026-46879 can be exploited by an unauthenticated attacker with network access via JDENET.
What impact does CVE-2026-46879 have?
CVE-2026-46879 allows for a compromise of confidentiality, integrity, and availability of affected systems.