Oracle ships 1,295 October patches and concentrates the risk on Fusion Middleware
On 20 October 2026, Oracle released its final Critical Patch Update of the year: 1,295 fixes for 1,209 CVEs across 33 product families, including 95 critical flaws. Fusion Middleware remains the top patch target with 206 fixes, 134 of them remotely exploitable without authentication.