Security1 hOctober 22, 2026, 14:38

Oracle patches 1,295 flaws in October 2026 CPU

Oracle released its October 2026 Critical Patch Update with 1,295 fixes covering 1,209 unique CVEs, including 95 critical-severity flaws. Fusion Middleware received the most patches at 206, 134 of which are remotely exploitable without authentication. The next CPU is scheduled for January 19, 2027.

SecurityWeek

Open source

Oracle patches 1,295 flaws in October 2026 CPU

1,209 CVEs: 95 critical, 439 high and 582 medium severity
Fusion Middleware gets 206 fixes, 134 without authentication
E-Business Suite receives 194 patches, MySQL 98
Next CPU scheduled for January 19, 2027

#Oracle#MySQL#Java

Oracle JDK 21 goes paid on October 20

Security

IBM and Red Hat patch 400-plus unknown Java flaws, open Clearinghouse

Security

PHP warns of two critical flaws, emergency patches due October 21

Software

Oracle patches 1,295 flaws in October 2026 CPU

Oracle JDK 21 goes paid on October 20

IBM and Red Hat patch 400-plus unknown Java flaws, open Clearinghouse

PHP warns of two critical flaws, emergency patches due October 21

JEP 543 Finalizes Structured Concurrency in JDK 28