Oracle July 2026 CPU: 1,449 Patches, 10 Score Max

Oracle's July 2026 Critical Patch Update is the largest quarterly release to date, shipping 1,449 patches that address 1,434 CVEs across 334 products; notably, Fusion Middleware contains 219 remotely exploitable issues with nine perfect CVSS 10.0 flaws and a separate CVSS 9.9 database vulnerability that can allow full takeover. The report emphasizes prioritizing unauthenticated, internet-facing fixes first, notes AI-assisted discovery driving the record patch count, and recommends using exposure-driven tools (CTI and ASM) to triage and remediate the most critical systems.