Oracle October update patches 1,295 flaws, six rated CVSS 10.0
Unauthenticated network bugs can take over E-Business Suite Workflow, SOA Suite, Access Manager, and JD Edwards Orchestrator.
72
Product
Oracle Fusion Middleware
- Mentions · 7d0
- Mentions · 30d3
- All mentions9
- First seenAug 19, 2026
- Last mentioned7d ago
Timeline
9 articles · newest firstOracle October 2026 CPU issues 1,295 patches, including CVSS 9.8 flaws
Six hundred ninety patches are remotely exploitable without authentication, spanning database, middleware, Java and applications.
72
Oracle October 2026 CPU fixes 1209 CVEs in 1295 patches
112 updates are critical; Fusion Middleware has 206 patches, 134 remotely exploitable without authentication.
58
Oracle’s September patches put Fusion Middleware back in the hot seat
Oracle's September 2026 CPU ships 673 patches including six CVSS 10.0 flaws in Fusion Middleware and Hyperion, none exploited in the wild.
65
Oracle Critical Security Patch Update, September 2026 Review
Oracle's September 2026 Critical Patch Update fixes 673 vulnerabilities, including 104 critical, with many remotely exploitable in E-Business Suite and Fusion Middleware.
55
Oracle Critical Security Update – 673 Vulnerabilities Patched Across Product Families
Oracle's September 2026 Critical Patch Update ships 673 patches across 17 product families, including 100+ critical and 240+ remotely exploitable flaws.
58
Oracle security advisory – January 2026 quarterly rollup (AV26-042) – Update 2
CISA added actively exploited Oracle flaw CVE-2026-21962 to the KEV catalog; it allows remote unauthorized access to Oracle HTTP Server and WebLogic Proxy Plug-in.
70
Oracle Critical Patch Update, August 2026 Security Update Review
Oracle's August 2026 Critical Patch Update fixes 943 vulnerabilities; Oracle Fusion Middleware and Hyperion received the most patches at 262.
42
Oracle August 2026 Critical Security Patch Update Addresses 925 CVEs
Oracle's August 2026 CSPU fixes 925 CVEs across 943 patches, including 154 critical fixes; Fusion Middleware gets 262 patches.
45
Related CVEs
by mentions- CVE-2026-2196273%10.0Unauthenticated Access Control Bypass in Oracle HTTP Server and WebLogic Proxy Plug-in
- CVE-2026-7113310.0Unauthenticated Takeover Flaw in Oracle Access Manager Authentication Engine (CVSS 10.0)
- CVE-2026-8302110.0Unauthenticated HTTP Takeover Flaw in Oracle WebLogic Server Web Container
- CVE-2026-8305910.0Unauthenticated LDAP Flaw Allows Full Takeover of Oracle Internet Directory
- CVE-2026-9121610.0Unauthenticated takeover in Oracle SOA Suite Fabric Layer
- Low-Privilege Takeover Flaw in Oracle BI Enterprise Edition 12.2.1.4.0
- Critical Flaw in Oracle Access Manager Authentication Engine Enables Full Compromise
- Missing authentication allows unauthenticated takeover of Oracle APEX
- Unauthenticated Takeover Flaw in Oracle EBS Document Management and Collaboration
- High-Privilege Takeover Flaw in Oracle BI Publisher (BI Platform Security)
Appears with
- Oraclevendor · 9
- Oracle E-Business Suiteproduct · 6
- Oracle Hyperionproduct · 3
- Oracle Database Serverproduct · 3
- Oracleorganization · 3
- CISAorganization · 2
- Oracle Java SEproduct · 2
- Oracle Access Managerproduct · 2
- Oracle MySQLproduct · 2
- Tenableorganization · 1
- Canadian Centre for Cyber Securityorganization · 1
- Oracle HTTP Serverproduct · 1
- Oracle Hyperion Financial Managementproduct · 1
- JD Edwards EnterpriseOne Orchestratorproduct · 1
- Oracle SOA Suiteproduct · 1
- Oracle Autonomous Health Frameworkproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.