VulnerabilityPublished 17 Jun 2026

Oracle’s Second Monthly Security Updates Deliver 245 Patches

Source SecurityWeek

Severity

Critical

Rated by Threat Radar

Data as of 17 Jun 2026, 18:00 UTC

What to do

AI-suggested

Oracle has released official patches addressing all identified vulnerabilities in this update. Users and administrators should promptly apply the June 2026 Critical Security Patch Update to mitigate risks. Oracle emphasizes that failure to apply available patches has led to successful exploitation attempts. There is no indication that additional mitigations beyond patching are required. Patch status is confirmed as official-fix by Oracle's advisory.

Description

Oracle has released its June 2026 Critical Security Patch Update to fix vulnerabilities in Communications, EBS, Enterprise Manager and other products. The post Oracle’s Second Monthly Security Updates Deliver 245 Patches appeared first on SecurityWeek .

Impact

The vulnerabilities patched in this update include many critical flaws, some exploitable remotely without authentication, increasing the risk of unauthorized access or compromise if unpatched. The presence of over 100 critical or high severity issues in Fusion Middleware and other widely used Oracle products means that affected systems are at significant risk if patches are not applied. Oracle's advisory indicates that attackers have successfully exploited known vulnerabilities on systems where patches were not applied, underscoring the real-world impact of these flaws. No confirmed zero-day exploitation is reported in this update, but recent exploitation of a PeopleSoft vulnerability highlights ongoing threat activity targeting Oracle products.

Summary

Oracle's June 2026 CSPU supplements its quarterly updates with monthly patches to address severe vulnerabilities more rapidly. This update includes 245 patches for a broad range of Oracle products. Roughly 120 vulnerabilities have critical severity ratings, and about 100 can be exploited remotely without authentication. The largest number of vulnerabilities patched are in Oracle Fusion Middleware. Oracle reports ongoing exploitation attempts targeting known vulnerabilities for which patches exist, emphasizing the importance of timely patching. Although a PeopleSoft vulnerability exploited by the ShinyHunters group is noted, the June CSPU does not confirm active exploitation of zero-day vulnerabilities. The update reflects Oracle's strategy to enhance security responsiveness through monthly patch releases.

References

securityweek.com/oracles-second-monthly-security-updates-deliver-245-patches/ (opens in a new tab)

Community reviews

Loading reviews…

What to do

Description

AI analysisMachine-generated, updated 17 Jun 2026, 09:15 UTC

References

Community reviews