Ce mail provient de l'extérieur, restons vigilants

=====================================================================


                            CERT-Renater

                Note d'Information No. 2026/VULN1054
_____________________________________________________________________

DATE                : 21/10/2026

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Oracle products.

====================================================================
https://blogs.oracle.com/security/october-2026-critical-patch-update-released
_____________________________________________________________________

October 2026 Critical Patch Update Released
October 20, 2026
Integrated Cyber Center (ICC)

Oracle today released the October 2026 Critical Patch Update.

This Critical Patch Update provides security updates for a wide range
of product families: Oracle Database Server, Oracle APEX, Oracle
Autonomous Health Framework, Oracle Essbase, Oracle Global Lifecycle
Management, Oracle GoldenGate, Oracle NoSQL Database, Oracle REST Data
Services, Oracle Secure Backup, Oracle SQL Developer, Oracle TimesTen
In-Memory Database, Oracle Trusted Answer Search, Oracle Application
Testing Suite, Oracle Commerce, Oracle Communications, Oracle
Construction and Engineering, Oracle E-Business Suite, Oracle Enterprise
Manager, Oracle Financial Services Applications, Oracle Fusion Middleware,
Oracle Analytics, Oracle HealthCare Applications, Oracle Hospitality
Applications, Oracle Java SE, Oracle JD Edwards, Oracle MySQL, Oracle
PeopleSoft, Oracle Retail Applications, Oracle Siebel CRM,
Oracle Supply Chain, Oracle Systems, Oracle Utilities Applications,
Oracle Virtualization.

Action required: Install the security release update promptly

Oracle Security Updates are released on the third Tuesday of each month.
We strongly encourage you and your team – if you haven’t already – to
move immediately to a monthly security patching cycle. Start by applying
the updates published in the October CPU.

Transitioning to a monthly security patching cadence may require updates
to existing operational processes. If your organization needs assistance
planning or executing that transition, Oracle Customer Success Services
(CSS) can reduce your security risk for the database and Oracle
technologies with vulnerability assessments, patches, upgrades,
migrations to cloud, and hardening.

For more information about the October 2026 Critical Patch Update,
customers should refer to the Critical Patch Update advisory located at
https://www.oracle.com/security-alerts/cpuoct2026.html and the executive
summary published on My Oracle Support (Doc ID CPU289) .

For more information about the Critical Patch Update program, see the
security vulnerability remediation practices page located on the
Oracle Trust Center.


Authors
Integrated Cyber Center (ICC)

Oracle’s Integrated Cyber Center (ICC) serves as the enterprise hub for
orchestrating Oracle’s global incident response, customer trust, and
strategic security communications. By unifying people, processes, and
intelligence across the organization, the ICC ensures Oracle operates
as one enterprise with one voice—protecting customers, strengthening
transparency, and driving continuous evolution of our collective
security posture.



=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================