Oracle Critical Patch Update October 2026

Oracle’s quarterly Critical Patch Updates (CPUs) address security vulnerabilities across its product portfolio, including those in third-party components. Building these updates into a structured patching programme helps reduce your exposure to security threats and strengthens the security and resilience of your Oracle estate.

This quarter’s Critical Patch Update delivers 1,295 new security fixes across the Oracle portfolio, addressing 590 critical vulnerabilities, many of which could be exploited remotely without authentication. To reduce risk and protect your Oracle estate, these CPU patches should be prioritised and scheduled for deployment as soon as possible.

What should I do?

Below is a list of affected products and the number of identified vulnerabilities for each. If you use any of these products, you must take the necessary action to address the potential vulnerabilities in your estate. But don’t worry. DSP is here to help. Customers frequently approach us at this time to utilise our Oracle Critical Patch Update Support Service to help stay on top of their patches. So, please get in touch if this is an area of concern for you.

List of identified products and vulnerabilities

The number in bold = the number of security patches

The numbers in (brackets) = the number of vulnerabilities

• Oracle Database Server: 14 (4)
• Oracle APEX: 2 (2)
• Oracle GoldenGate: 11 (3)
• Oracle E-Business Suite: 194 (31)
• Oracle Essbase: 38 (14)
  
• Oracle Enterprise Manager (OEM): 12 (2) 
• Oracle Financial Services Applications: 5 (5)
• Oracle Fusion Middleware: 206 (134)
• Oracle Analytics: 33 (14)
• Oracle Java SE: 55 (49)
• Oracle JD Edwards: 102 (44)
• Oracle MySQL: 98 (29) 
• Oracle PeopleSoft: 109 (41)
• Oracle REST Data Services: 35 (11)
• Oracle Retail Applications: 5 (5)
• Oracle Siebel CRM: 122 (66)
• Oracle Supply Chain: 50 (19)
• Oracle Utilities Applications: 8 (7)
• Oracle Virtualization: 6

Although a long list of vulnerabilities might seem daunting, securing your hardware and applications is essential. You can protect your environment effectively by staying proactive and regularly applying Critical Patch Updates. Here is the list with details on all the patches. Your system's safety is our priority.

If you would like Oracle Critical Patch Update Support, please Contact Us or book a meeting...