Oracle July 2026 Update Patches 1,434 CVEs Across 334 Products

· Original article ↗

Summary

Oracle’s July 2026 Critical Patch Update addresses 1,434 CVEs across 334 products. About 600 patches cover flaws exploitable remotely without authentication; most vulnerabilities were likely found internally, possibly with AI assistance.

Key points

  • Oracle issued 1,449 security patches addressing 1,434 unique CVEs across 334 products.
  • About 600 patches address vulnerabilities exploitable remotely without authentication; hundreds of flaws have critical severity ratings.
  • E-Business Suite, Fusion Middleware, Communications, and PeopleSoft received the largest numbers of fixes.
  • Oracle credits external researchers with discovering only a few dozen flaws, so most were likely identified internally; the article says AI may have assisted.
  • Oracle advises organizations to install the updates promptly, noting that threat actors have exploited Oracle product vulnerabilities.

Article Details

Event Type
Oracle released its July 2026 Critical Patch Update, providing security patches for vulnerabilities across its products.
Impact
Oracle reported 1,449 security patches addressing 1,434 unique CVEs across 334 products. Roughly 600 patches address vulnerabilities reportedly exploitable remotely without authentication, and hundreds of flaws have critical severity ratings. E-Business Suite, Fusion Middleware, Communications, and PeopleSoft had the highest patch counts. The article says most newly patched flaws were likely found internally, possibly with AI assistance. Organizations are urged to install the patches promptly.

Vendors

Products

Related Articles