Oracle has released its August 2026 Critical Security Patch Update, providing 943 security patches to address more than 1,000 vulnerabilities across multiple Oracle products, including vulnerabilities that could be exploited remotely without authentication.

Affected systems

Affected products include, but are not limited to:

• Oracle Database   

• Oracle Enterprise Manager

• Oracle Application Testing Suite

• Oracle E-Business Suite   

• Oracle Fusion Middleware

• Oracle Java SE    

Security Risks

Successful exploitation of these vulnerabilities could allow attackers to gain unauthorized access, compromise sensitive information, execute unauthorized actions, disrupt services, or otherwise compromise affected Oracle systems and environments.

For the full list of security updates released by Oracle, please refer to Critical Patch Updates.

Recommended Actions

The National Cyber Security Authority (NCSA) recommends the following actions:

1. Upgrade as soon as possible to the latest supported version of installed software in order to continue receiving technical support and security patches.

2. Ensure you have the latest backup that can be easily restored before applying any updates or patches.

For further information and support, please contact the National Cyber Security Authority (NCSA) by emailto rwcsirt@ncsa.gov.rw or call us on 9009.

References

• Oracle Critical Patch Update Advisory - August 2026

• Oracle Critical Patch Updates, Security Alerts and Bulletins

• 943 Patches Rolled Out With Oracle’s August 2026 Security Update