News
cybersecurity Ransomware Hackers Use Claude AI to Plan Attacks Against 62 Organizations, Researchers Reveal - CyberPress threat-intel INC Ransomware Hackers Use Claude AI, Expose 8,257 Messages and 46 Malware Builds - GBHackers cybersecurity Microsoft Changes Bug Bounty Rules, Requires Detailed Proof of Concept for Higher Rewards - CyberPress threat-intel Microsoft Introduces New Bug Bounty Rules That Could Affect Security Researchers’ Rewards - GBHackers cybersecurity Hackers Compromise 333 Tor Exit Nodes to Intercept SSH Connections and Steal Passwords - CyberPress threat-intel Hackers Exploit Compromised UpdraftCentral Keys to Install Malicious Plugins on WordPress Sites - GBHackers cybersecurity PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert - The Hacker News threat-intel eMudhra Security Incident Exposes Weak Private Keys Used to Sign Trusted Certificates - GBHackers threat-intel Two Critical PHP RCE Vulnerabilities With CVSS 9.2 Score Put Web Servers at Risk - GBHackers cybersecurity PHP warns it plans to release 2 emergency patches imminently - Ars Technica Security cybersecurity What you need to know about PHP2shell. Critical vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) - Aikido Security cybersecurity Stolen UpdraftCentral keys used to backdoor WordPress sites - BleepingComputer vulnerability 2026-018: Critical Vulnerabilities in PHP - CERT-EU Security Advisories vulnerability Oracle October 2026 Critical Patch Update Addresses 1209 CVEs - Tenable Security Research cybersecurity Tech Giants Block eMudhra Certificates Tied to 8 Compromised Keys - Dark Reading
1 / 15
All news ›
Vulnerability

Oracle October 2026 Critical Patch Update Addresses 1209 CVEs

Tenable Security Research ·

Oracle addresses 1209 CVEs in its final quarterly update of 2026 with 1295 patches, including 112 critical updates. Key Takeaways The October 2026 Critical Patch Update (CPU) contains fixes for 1209 unique CVEs in 1295 security updates 112 issues (8.6% of all patches) were assigned a critical severity rating Oracle Fusion Middleware received the highest number of patches at 206, accounting for 15.9% of all patches Background On October 20, Oracle released its Critical Patch Update (CPU) for October 2026 , the final quarterly update of the year. This CPU contains fixes for 1209 unique CVEs in 1295 security updates across 33 Oracle product families. Out of the 1295 security updates published this quarter, 8.6% of patches were assigned a critical severity. Medium severity patches accounted for the bulk of security patches at 47.3%, followed by high severity patches at 36.7%. This quarter's update includes 112 critical patches across 95 CVEs. Severity Issues Patched CVEs Critical 112 95 Hi

Continue on Tenable Security Research ↗ ‹ All news Get the newsletter

The summary and image come from Tenable Security Research; the image is shown from their website.