Reported by 1 outlet
Oracle's Second Monthly CSPU Delivers 245 Patches — 120+ Critical, 100 Remotely Exploitable Without Auth
Why this score
- Breadth
- 0.50 / 2.0 · 1 source
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 5.00 / 5.0 · CVSS + KEV signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.00 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Oracle's Second Monthly CSPU Delivers 245 Patches — 120+ Critical, 100 Remotely Exploitable Without Auth
securityweek.com · 119d ago · June 17th, 2026
Oracle released its June 2026 Critical Security Patch Update, the second since transitioning to monthly patch cycles. The update covers 245 vulnerabilities across Communications, EBS, Enterprise Manager, Fusion Middleware, MySQL, PeopleSoft, and other product families. Roughly 120 flaws are rated critical, and 100 can be exploited remotely without authentication. Fusion Middleware received the heaviest patch load with 100+ fixes. Oracle warned it "continues to periodically receive reports of attempts to maliciously exploit vulnerabilities for which patches already exist," referencing the ShinyHunters group's exploitation of CVE-2026-35273 (PeopleSoft) against 100+ organizations.