Reported by 4 outlets

Timeline

1. original reporting

   Oracle August 2026 Critical Security Patch Update Addresses 925 CVEs

   tenable.com · 56d ago · August 19th, 2026

   Oracle addresses 925 CVEs in its August 2026 Critical Security Patch Update with 943 patches, including 154 critical updates. Key Takeaways The August 2026 Critical Security Patch Update (CSPU) contains fixes for 925 unique CVEs in 943 security updates 154 issues (16.3% of all patches) were assigned a critical severity rating Oracle Fusion Middleware received the highest number of patches at 262, accounting for 27.8% of all patches Background On August 18, Oracle released its Critical Security Patch Update (CSPU) for August 2026 . Beginning in May 2026, Oracle introduced CSPUs as a monthly release cycle that sits between the larger quarterly Critical Patch Updates (CPUs), addressing a focused set of high-severity issues on a faster cadence. This CSPU contains fixes for 925 unique CVEs in 943 security updates across 23 Oracle product families, a nearly fourfold increase in patch volume compared to the June 2026 CSPU, which addressed 243 CVEs in 245 patches across 11 product families. To put that in context against the quarterly CPUs: the April 2026 CPU contained 481 patches across 241 CVEs, and the July 2026 CPU, the largest CPU release of 2026, contained 1,449 patches across 1,235 CVEs. August's CSPU at 943 patches sits well above the April CPU and represents roughly 65% of July's quarterly volume, a striking figure for what is nominally a targeted between-cycle release. The expansion to 23 product families (up from 11 in June) further blurs the line between CSPU and CPU in t

2. mentioned by securityweek.com

   943 Patches Rolled Out With Oracle’s August 2026 Security Update

   securityweek.com · 55d ago · August 19th, 2026

3. update from cyberpress.org

   Oracle Security Update Patches Critical WebLogic, Hyperion and Fusion Middleware Flaws

   cyberpress.org · 55d ago · August 19th, 2026

   The release demands immediate attention from enterprises running Oracle WebLogic Server , Hyperion Enterprise Performance Management products, and Fusion Middleware services, where remotely exploitable vulnerabilities could compromise sensitive business systems. Oracle said customers should deploy the fixes without delay, noting that attackers have successfully exploited previously patched Oracle vulnerabilities when organizations failed to apply the available updates. Oracle Security Update Patches Multiple Flaws WebLogic Server is among the most significant products affected. Several are remotely exploitable without authentication and carry CVSS scores of 9.8, meaning an unauthenticated attacker could potentially compromise confidentiality, integrity, and availability over the network. CVE-2026-60698 affects the WebLogic Server Core through IIOP, while CVE-2026-60672 and CVE-2026-60696 affect Core services exposed through T3 and IIOP. Oracle also patched CVE-2026-60977 in WLS Core Components over RMI. All four critical entries have a 9.8 CVSS score and require no authentication, making externally exposed middleware deployments a priority for patching. CVE Affected Oracle product/component Access vector CVSS 3.1 CVE-2

4. update from gbhackers.com

   Oracle Releases 943 Security Patches to Fix Critical Vulnerabilities Across Enterprise Products

   gbhackers.com · 55d ago · August 19th, 2026

   This update affects Oracle products under both Premier Support and Extended Support. It includes fixes for flaws tracked by various CVE identifiers. Oracle Releases 943 Security Patches The vulnerabilities […] The post Oracle Releases 943 Security Patches to Fix Critical Vulnerabilities Across Enterprise Products appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .