Oracle Patches 800+ Vulnerabilities in September 2026 Security Update
Oracle's September 2026 Critical Patch Update fixes 800+ vulnerabilities, including over 100 critical flaws and 240+ remotely exploitable without authentication.
Oracle released 673 new security patches in its September 2026 Critical Security Patch Update, resolving 672 unique CVEs across 17 risk matrices plus 130+ additional CVEs. More than 100 flaws are critical severity and over 240 are remotely exploitable without authentication. Oracle E-Business Suite received the largest batch with 159 patches, followed by Fusion Middleware (153, including 78 unauthenticated remote flaws) and Hyperion (102). Oracle reports no exploitation of these specific flaws but warns attackers routinely exploit unpatched Oracle products.
- 672 unique CVEs across 17 risk matrices, plus 130+ additional CVEs resolved
- Over 100 critical flaws and 240+ remotely exploitable without authentication
- E-Business Suite: 159 patches (19 unauthenticated); Fusion Middleware: 153 (78 unauthenticated)
- No exploitation reported for these flaws; Oracle urges immediate patching
- Also covers Siebel, Analytics, Database Server, Java SE, Virtualization, PeopleSoft
- Products
- Oracle DatabasePeopleSoft
From the original article
1 min read at securityweek.com
The security updates resolve over 800 vulnerabilities across 17 product families, including over 100 critical-severity flaws. The post Oracle Patches 800+ Vulnerabilities in September 2026 Security Update appeared first on SecurityWeek.
By Ionut Arghire · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.