Oracle Critical Patch Update, June 2026 Security Update Review

Oracle's June Critical Patch Update fixes 245 security vulnerabilities across numerous product families (Fusion Middleware, E-Business Suite, JD Edwards, MySQL, PeopleSoft, etc.), with Fusion Middleware receiving 106 fixes; many are network-exploitable and several are critical remote code execution issues (notably CVE-2026-46850, CVE-2026-46860, CVE-2026-46861 and CVE-2026-35278). Qualys has published initial QIDs for scanning coverage and the advisory notes that some patches address non-Oracle (third-party/open-source) CVEs included in Oracle distributions.