Oracle October 2026 CPU fixes 1209 CVEs in 1295 patches
Original title: Oracle October 2026 Critical Patch Update Addresses 1209 CVEs
112 updates are critical; Fusion Middleware has 206 patches, 134 remotely exploitable without authentication.
On October 20, Oracle released its final 2026 quarterly Critical Patch Update, covering 1209 unique CVEs in 1295 security updates across 33 product families. Of those updates, 112 are critical, 475 high, 613 medium and 95 low. Fusion Middleware and E-Business Suite received the most patches. Oracle customers are advised to apply all relevant patches; exploitation status is not stated.
- Critical patches cover 95 CVEs, or 8.6% of the 1295 updates.
- E-Business Suite has 194 patches, 31 remotely exploitable without authentication.
- Oracle Java SE has 55 patches, 49 remotely exploitable without authentication.
- Database Server has 14 patches, four remotely exploitable without authentication.
Impact: Includes flaws remotely exploitable without authentication
| Product | Affected |
|---|---|
| Oracle Fusion Middleware | — |
| Oracle E-Business Suite | — |
| Oracle Java SE | — |
| Oracle Database Server | — |
- 1.Apply all relevant patches from the October 2026 Critical Patch Update.
- Vendors
- Oracle
- Products
- Oracle Fusion MiddlewareOracle E-Business SuiteOracle Java SEOracle Database ServerOracle MySQL
- Organizations
- Tenable
From the original article
2 min read at tenable.com
Oracle addresses 1209 CVEs in its final quarterly update of 2026 with 1295 patches, including 112 critical updates. Key Takeaways The October 2026 Critical Patch Update (CPU) contains fixes for 1209 unique CVEs in 1295 security updates 112 issues (8. 6% of all patches) were assigned a critical severity rating Oracle Fusion Middleware received the highest number of patches at 206, accounting for 15.
By Research Special Operations · tenable.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.