THREATOPS
THREAT OPSThreat News › Oracle September 2026 Critical Security Patch Update addresses 672 CVEs

Oracle September 2026 Critical Security Patch Update addresses 672 CVEs

medtenablePublished 2026-09-15

<p><strong>Oracle addresses 672 CVEs in its September 2026 Critical Security Patch Update with 673 patches, including 104 critical updates.</strong></p><h2>Key Takeaways</h2><ol><li>The September 2026 Critical Security Patch Update (CSPU) contains fixes for 672 unique CVEs in 673 security updates</li><li>104 issues (15.5% of all patches) were assigned a critical severity rating</li><li>Oracle E-Bu

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://www.tenable.com/blog/oracle-september-2026-critical-security-patch-update-addresses-672-cves