[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flKFyaSQD6lTXq2XRzT8fqQAG-WR4BmXnKQJgIIANfGs":3},{"article":4,"iocs":41},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":28,"category":29,"article_tags":33},"f6514ccb-67fb-4831-a8aa-0379cf5a1f94","943 Patches Rolled Out With Oracle’s August 2026 Security Update","943-patches-rolled-out-with-oracle-s-august-2026-security-update-8c7fee","The fixes resolve over 1,000 vulnerabilities across two dozen products, including over 460 remotely exploitable bugs. The post 943 Patches Rolled Out With Oracle’s August 2026 Security Update appeared first on SecurityWeek.","Oracle has released its August 2026 Critical Security Patch Update (CSPU), delivering 943 patches that fix over 1,000 unique CVEs across 24 products. A significant portion, over 460, are remotely exploitable without authentication, with more than 150 classified as critical severity. Oracle suggests AI is accelerating vulnerability discovery and patching efforts, while also warning customers to apply updates promptly due to ongoing exploitation attempts.","Oracle releases 943 patches addressing over 1,000 vulnerabilities across two dozen products.","Oracle on Tuesday announced the release of 943 new security patches as part of the August 2026 Critical Security Patch Update (CSPU), its third monthly security rollout. The company’s advisory mentions more than 1,000 unique CVEs across two dozen products, including over 460 vulnerabilities that can be exploited remotely without authentication. The patches for dozens of vulnerabilities address additional security flaws. More than 150 of the security defects are critical-severity bugs, and nearly 90 of them have a CVSS score of 9.8 or higher. Fusion Middleware and Hyperion received the largest number of new security patches this month, at 262 each, including over 100 critical-severity flaws (80 and 27, respectively). Per Oracle’s advisory, the Fusion Middleware update resolves 182 bugs that can be exploited remotely without authentication, while the Hyperion refresh patches 107 such weaknesses. Oracle also released a large number of patches for E-Business Suite (120), Commerce (66), Siebel CRM (50), and Supply Chain (46).Advertisement. Scroll to continue reading. Other products that received fixes this month include VM VirtualBox, Analytics, PeopleSoft, Communications, Enterprise Manager, MySQL, Financial Services Applications, Autonomous Health Framework, Application Testing Suite, JD Edwards, Database Server, Java SE, Retail Applications, Essbase, Food and Beverage Applications, Construction and Engineering, and Hospitality Applications. With over 1,000 resolved security defects, the August 2026 CSPU falls slightly behind the July 2026 Critical Patch Update, which included 1,449 security patches that addressed over 1,400 unique CVEs. The high number of patches is likely driven by the use of AI for vulnerability discovery. Oracle announced earlier this year that it was using advanced LLM models to speed up patching. Oracle customers are advised to apply the security updates as soon as possible, as threat actors have been known to exploit vulnerabilities in Oracle products. “Oracle continues to periodically receive reports of attempts to maliciously exploit vulnerabilities for which Oracle has already released security patches,” the company notes. Related: 300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw Related: Recent macOS Screen Sharing Vulnerability Exploited in Attacks Related: Hackers Exploiting Unpatched GeoServer Zero-Day Related: Critical VMware vCenter Vulnerability in Attackers’ Crosshairs Written By Ionut Arghire Ionut Arghire is an international correspondent for SecurityWeek. Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights. More from Ionut Arghire Heights Finance Data Breach Impacts at Least 1.2 Million IndividualsGitLab Patches Critical Code Injection VulnerabilityDozens of WebKit Vulnerabilities Patched With Fresh macOS, iOS Security Updates680,000 Impacted by French Tax Authority Data Breach40,000 Impacted by SafePal Data BreachRecent macOS Screen Sharing Vulnerability Exploited in AttacksFortune 500 Companies Hit in Azure Data Theft CampaignTrivy, Not LiteLLM Behind the 2,500 Org Compromise Latest News Chrome, Firefox Updates Patch Dozens of VulnerabilitiesCareCloud Data Breach Impact Grows to 3.7 Million IndividualsWebinar Today: Rethinking Cyber Defense for AI-Speed AttacksCISO Conversations: Nico Waisman – From Self-Taught Hacker to AI-Driven Offensive Security at XBOWAI-Driven Vulnerability Surge Breaks the Traditional Patching ModelXpander Raises $7.5 Million for AI Management and GovernanceFortinet Acquires AI Security Company Virtue AI300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw Trending Daily Briefing NewsletterSubscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts. Webinar: Rethinking Cyber Defense for AI-Speed Attacks August 18, 2026 Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default. Register Virtual Event: CodeSecCon 2026 August 19, 2026 CodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps! Register People on the MoveDali Rajic is joining OpenAI as Chief Revenue Officer.Erika Dean has been appointed Chief Information Security Officer at Tricentis.C1 has named Jeff St. Clair Chief Revenue Officer.More People On The MoveExpert Insights The AI Governance Gap Is a Leadership Problem: Waiting Won’t Close It Organizations are rushing to implement AI without fully grasping where its legal protections begin and end. (Steve Durbin) Rethinking AI Security: Why CASB and DLP Need an Interaction-Aware Layer Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use. (Etay Maor) Timeless Compliance: Why Better Questions Beat Bigger Frameworks The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change. (Matt Honea) Is Patching Dead? Vulnerability Management in the Post-Mythos Era You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win. (Danelle Au) When Identity Verification Fails: Lessons from a Real-World SIM Swap and Near Account Takeover Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge. (Torsten George) Flipboard Reddit Whatsapp Whatsapp Email","https:\u002F\u002Fwww.securityweek.com\u002F943-patches-rolled-out-with-oracles-august-2026-security-update\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F10\u002FOracle.jpeg","2026-08-19T09:14:51+00:00","2026-08-19T10:00:24.13264+00:00",8,[18,21,23,25],{"name":19,"type":20},"VM VirtualBox","product",{"name":22,"type":20},"Java SE",{"name":24,"type":20},"MySQL",{"name":26,"type":27},"Oracle","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":30,"name":31,"slug":32},null,"Vulnerabilities","vulnerabilities",[34,36],{"category":35},{"id":28,"icon":30,"name":31,"slug":32},{"category":37},{"id":38,"icon":30,"name":39,"slug":40},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",[]]