CVE-2026-87317: Vulnerability in JD Edwards EnterpriseOne Tools

CVE-2026-87317 is an improper access control vulnerability (CWE-284) in JD Edwards EnterpriseOne Tools. An unauthenticated attacker with network access via SMTP can exploit the difficult-to-exploit vulnerability to gain unauthorized ability to update, insert, or delete some accessible data and to cause a partial denial of service. Affected supported versions are 9.2.0.0–9.2.26.5.