Oracle released its first Critical Patch Update (CPU) for 2026. The update delivers 337 new security patches across a wide range of products. These patches address vulnerabilities in Oracle's code and third-party components. Oracle strongly recommends customers apply these security patches without delay to protect against potential exploitation.
The patches span more than 30 product lines. These lines include Oracle Communications, Fusion Middleware, MySQL, and Financial Services Applications.
Over 235 of the fixed vulnerabilities allow remote exploitation without requiring user authentication. This underscores the importance of the update for system administrators.