As cited
Copy frozen at (site build).
vulnerabilities
Oracle September 2026 Critical Security Patch Update addresses 672 CVEs
Oracle released its September 2026 Critical Security Patch Update (CSPU) on September 15, addressing 672 unique CVEs across 673 patches spanning 17 product families. The update includes 104 critical-severity patches, with Oracle E-Business Suite and Fusion Middleware receiving the most fixes at 159 and 153 patches respectively. A total of 147 patches can be exploited remotely without authentication.
Why it matters: Organizations running Oracle products, especially E-Business Suite and Fusion Middleware, need to prioritize applying these patches immediately given the high volume of critical issues and remotely exploitable vulnerabilities without authentication.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Oracle September 2026 Critical Security Patch Update addresses 672 CVEs
Oracle released its September 2026 Critical Security Patch Update (CSPU) on September 15, addressing 672 unique CVEs across 673 patches spanning 17 product families. The update includes 104 critical-severity patches, with Oracle E-Business Suite and Fusion Middleware receiving the most fixes at 159 and 153 patches respectively. A total of 147 patches can be exploited remotely without authentication.
Why it matters: Organizations running Oracle products, especially E-Business Suite and Fusion Middleware, need to prioritize applying these patches immediately given the high volume of critical issues and remotely exploitable vulnerabilities without authentication.
- Source published
- First seen by Cybersecurity Tracker