Vulnerabilities
Many of the vulnerabilities fixed with the July 2026 Critical Patch Update were likely discovered by AI.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Oracle"
Vulnerabilities
Oracle has released its June 2026 Critical Security Patch Update to fix vulnerabilities in Communications, EBS, Enterprise Manager and other products.
Cybercrime
Oracle has mitigated CVE-2026-35273, but it has not publicly confirmed the vulnerability’s in-the-wild exploitation.
Vulnerabilities
Oracle has released mitigations for CVE-2026-35273, but it has not said whether it’s a zero-day exploited in ShinyHunters attacks.
Vulnerabilities
The vulnerability is CVE-2024-21182 and it can be exploited without authentication to hack affected WebLogic servers.
Vulnerabilities
Oracle’s monthly Critical Security Patch Update (CSPU) rollouts are meant to deliver critical fixes faster.
Vulnerabilities
Containing fixes for critical-severity vulnerabilities, the monthly rollouts will focus on addressing priority issues faster.
Vulnerabilities
The company released 481 new security patches across 28 product families, including over 300 fixes for remotely exploitable, unauthenticated flaws.
Vulnerabilities
CVE-2026-21992 can be used without authentication for remote code execution and it may have been exploited in the wild.
Vulnerabilities
Oracle’s January 2026 CPU resolves roughly 230 unique vulnerabilities across more than 30 products.
Vulnerabilities
CISA has added CVE-2025-61757 to its Known Exploited Vulnerabilities (KEV) catalog.
Vulnerabilities
CVE-2025-61757 is an unauthenticated remote code execution vulnerability affecting Oracle Identity Manager.
Vulnerabilities
The Critical Patch Update contains 374 new security patches that resolve many vulnerabilities.
Vulnerabilities
It’s unclear if the new Oracle E-Business Suite flaw, which can be exploited remotely without authentication, has been used in the wild.
Data Breaches
The software giant’s investigation showed that vulnerabilities patched in July 2025 may be involved.
Cybercrime
Executives at major firms received extortion threats alleging theft of sensitive data from Oracle EBS, with possible ties to Cl0p and FIN11.
Vulnerabilities
Oracle’s July 2025 Critical Patch Update contains 309 security patches that address approximately 200 unique CVEs.
Identity & Access
CISA is making recommendations for organizations and users in light of the recent Oracle legacy cloud environment hack.
Vulnerabilities
Oracle’s April 2025 Critical Patch Update contains 378 security patches that resolve approximately 180 unique CVEs.
Data Breaches
Oracle is sending out written notifications to customers over the recent hack after it initially appeared to completely deny a data breach.
Data Breaches
The physical security firm says its alarm monitoring and system functionality have not been affected.
Artificial Intelligence
Artificial Intelligence
Identity & Access
Artificial Intelligence
Many companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.
Fraud & Identity Theft
Cybersecurity Funding
Vulnerabilities
