Oracle Critical Security Update – 673 Vulnerabilities Patched Across Product Families

Oracle released a large September 2026 Critical Security Patch Update (CSPU) addressing over 672 unique CVEs and more than 130 additional bundled CVEs across 17 product families; the release includes 100+ critical vulnerabilities and over 240 remotely exploitable unauthenticated flaws. Fusion Middleware, E-Business Suite, and Hyperion are singled out as high-priority for remediation, and Oracle urges customers to apply patches promptly though no specific active exploitation of these fixes is reported.