Oracle October 2026 CPU: 1,295 patches for 1,209 CVEs, with unauthenticated CVSS 9.8–9.9 flaws in Database, APEX and Essbase
Oracle released its October 2026 Critical Patch Update on October 20, the final quarterly update of the year. It delivers 1,295 security patches for 1,209 unique CVEs across 33 product families (tenable.com). The patch count is higher than the CVE count because one CVE can appear in several product matrices (gbhackers.com). 112 patches (8…