Oracle Critical Security Patch Update, September 2026 Review

As cited

Copy frozen at 2026-10-11 09:29 UTC (site build).

vulnerabilities

Oracle Critical Security Patch Update, September 2026 Review

Oracle released its September 2026 Critical Security Patch Update addressing 673 vulnerabilities across multiple product families, with 104 rated critical (15.5%), 503 as important (74.7%), and 59 as medium. Oracle E-Business Suite received the most patches at 159, followed by Oracle Fusion Middleware with 153, and 41 patches address non-Oracle CVEs in open-source components. Critical vulnerabilities in E-Business Suite (CVE-2026-83327, CVE-2026-83452, CVE-2026-83462 with CVSS 9.8), Fusion Middleware (67 critical CVEs), Hyperion (14 critical CVEs), Siebel CRM (6 critical CVEs), and Analytics (4 critical CVEs) can be exploited over a network without authentication in many cases.

Why it matters: Organizations running Oracle E-Business Suite, Fusion Middleware, Hyperion, Siebel, or Analytics must prioritize patching critical vulnerabilities that allow remote exploitation without credentials, particularly the 9.8-rated E-Business Suite CVEs and 78 unauthenticated exploitable flaws in Fusion Middleware.

Source published

2026-09-16 14:15 UTC

First seen by Cybersecurity Tracker

2026-10-11 03:43 UTC