Oracle Patches 800+ Vulnerabilities in September 2026 Security Update
Source SecurityWeek
Rated Critical by SecurityWeek
Data as of 16 Sep 2026, 08:16 UTC
What to do
AI-suggested
Oracle strongly recommends that customers remain on actively supported versions and apply the September 2026 Critical Security Patch Update without delay. Applying these patches promptly is the primary mitigation to address the vulnerabilities. No additional mitigation guidance or temporary workarounds are provided or indicated by Oracle at this time.
Description
Oracle released its September 2026 Critical Security Patch Update addressing over 800 vulnerabilities across 17 product families, including more than 100 critical-severity flaws. Many of these vulnerabilities are remotely exploitable without authentication. The update includes significant patches for Oracle E-Business Suite, Fusion Middleware, Hyperion, and other major Oracle products. Oracle warns that attackers regularly exploit vulnerabilities in its products and urges customers to apply patches promptly. No active exploitation of these specific vulnerabilities has been reported at this time.