Oracle July 2026 Update Patches 1,434 CVEs Across 334 Products

Summary
Oracle’s July 2026 Critical Patch Update addresses 1,434 CVEs across 334 products. About 600 patches cover flaws exploitable remotely without authentication; most vulnerabilities were likely found internally, possibly with AI assistance.
Key points
- Oracle issued 1,449 security patches addressing 1,434 unique CVEs across 334 products.
- About 600 patches address vulnerabilities exploitable remotely without authentication; hundreds of flaws have critical severity ratings.
- E-Business Suite, Fusion Middleware, Communications, and PeopleSoft received the largest numbers of fixes.
- Oracle credits external researchers with discovering only a few dozen flaws, so most were likely identified internally; the article says AI may have assisted.
- Oracle advises organizations to install the updates promptly, noting that threat actors have exploited Oracle product vulnerabilities.
Article Details
- Event Type
- Oracle released its July 2026 Critical Patch Update, providing security patches for vulnerabilities across its products.
- Impact
- Oracle reported 1,449 security patches addressing 1,434 unique CVEs across 334 products. Roughly 600 patches address vulnerabilities reportedly exploitable remotely without authentication, and hundreds of flaws have critical severity ratings. E-Business Suite, Fusion Middleware, Communications, and PeopleSoft had the highest patch counts. The article says most newly patched flaws were likely found internally, possibly with AI assistance. Organizations are urged to install the patches promptly.
Vendors
Products
CommunicationsSpatial Studio, SQL Developer, TimesTen In-Memory Database, Application Testing Suite, Commerce, Communications, Construction and Engineering, and E-Business Suite.E-Business SuiteDatabase, Application Testing Suite, Commerce, Communications, Construction and Engineering, and E-Business Suite.Oracle Fusion Middlewareavailable for Enterprise Manager, Financial Services Applications, Food and Beverage Applications, Fusion Middleware, Analytics, HealthCare Applications, Hospitality Applications, Java SE, JD Edwards, MySQL,PeopleSoftMiddleware, Analytics, HealthCare Applications, Hospitality Applications, Java SE, JD Edwards, MySQL, PeopleSoft, Retail Applications, Siebel CRM, Supply Chain, Systems, Utilities Applications, and Virtualization.
