Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU
Oracle has released its Critical Patch Update (CPU) for October 2026. The latest updates bring 1,295 new fixes across dozens of products.
According to an analysis conducted by Tenable, the new CPU addresses 1,209 unique CVEs, including 95 critical-severity flaws.
Tenable says 439 CVEs have been assigned a high severity rating and 582 are medium severity.
Oracle Fusion Middleware received the most fixes, 206, including 134 that can be exploited remotely without authentication.
A significant number of patches were also rolled out for E-Business Suite (194), Siebel CRM (122), Communications (110), PeopleSoft (109), JD Edwards (102), MySQL (98), Java SE (55), and Supply Chain (50).
Oracle Essbase, REST Data Services, Analytics, Systems, Database Server, Construction and Engineering, Enterprise Manager, GoldenGate, Trusted Answer Search, Utilities Applications, Secure Backup, Virtualization, Autonomous Health Framework, Financial Services Applications, Retail Applications, TimesTen In-Memory Database, Healthcare Applications, Hospitality Applications, Commerce, APEX, Application Testing Suite, Global Lifecycle...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE