Oracle has released its July 2026 Critical Patch Update (CPU), delivering 1,449 security fixes that remediate 1,434 unique vulnerabilities across 334 products, including critical issues exploitable remotely with potential impact that can affect business operations and stability.

Affected systems

Affected products include, but are not limited to:

• Oracle Database   

• Oracle Financial Services Applications

• Oracle E-Business Suite   

• Oracle Java SE    

• Oracle MySQL  

• Oracle Fusion Middleware

Security Risks

The identified vulnerabilities could be exploited to run malicious code, gain unauthorized access, expose or modify sensitive data, and disrupt critical systems. Exploitation may result in operational downtime, financial losses, and reputational harm.

For the full list of security updates released by Oracle, please refer to Critical Patch Updates.

Recommended Actions

The National Cyber Security Authority (NCSA) recommends the following actions:

1. Upgrade as soon as possible to the latest supported version of installed software in order to continue receiving technical support and security patches.

2. Ensure you have the latest backup that can be easily restored before applying any updates or patches.

For further information and support, please contact the National Cyber Security Authority (NCSA) by emailto rwcsirt@ncsa.gov.rw or call us on 9009.

References

• Oracle Critical Patch Update Advisory - July 2026

• Oracle Critical Patch Updates, Security Alerts and Bulletins

• Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates