Skip to main navigation Skip to main content Skip to page footer

Security Alert: Critical Remote Code Execution Vulnerabilities in PHP

Data Protection Office
Contact us Report an incident
Data Protection Office
Contact us Report an incident

Security Alert: Oracle Security Updates – October 2026

Oracle has released its October 2026 Critical Patch Update (CPU), addressing 1,209 unique vulnerabilities across multiple products, including 95 critical severity vulnerabilities. These vulnerabilities could compromise system security and expose sensitive data.

Affected products include, but are not limited to:

Security Risks

Exploitation of these vulnerabilities could enable attackers to gain unauthorized access to affected systems, execute malicious code, disclose sensitive information, or disrupt system operations.

For the full list of security updates released by Oracle, please refer to Critical Patch Updates. 

Recommended Actions

The National Cyber Security Authority (NCSA) recommends the following actions:

  1. Upgrade as soon as possible to the latest supported version of installed software to continue receiving technical support and security patches.

  2. Ensure you have the latest backup that can be easily restored before applying any updates or patches.

For further information and support, please contact the National Cyber Security Authority (NCSA) by email to rwcsirt@ncsa.gov.rw or call us on 9009.

References