Oracle fixes 1295 vulnerabilities including six maximum severity flaws
Oracle released its October Critical Patch Update, resolving 1,295 security vulnerabilities, including six flaws rated 10.0 on the CVSS scale.
FTMQ Security, written by our newsroom0 views
Oracle has released its October Critical Patch Update Advisory to fix 1,295 security vulnerabilities across its software line-up. CSO Online and CIO both report that six of the patched security flaws received a maximum severity score of 10.0 on the CVSS version 3.1 scale. [1][2]
Four separate Oracle products contained the maximum-severity flaws, while many other products received critical security updates. CSO Online reported that Oracle E-Business Suite was among the affected systems, containing a maximum-severity flaw tracked as CVE-2026-101809. [1]
According to CSO Online, the CVE-2026-101809 vulnerability exists within the Workflow component of Oracle E-Business Suite. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the workflow notification mailer and fully take over the Workflow component. [1]
In short
- Oracle patched 1,295 security vulnerabilities in its October Critical Patch Update Advisory.
- Six of the security vulnerabilities received a maximum CVSS version 3.1 score of 10.0.
- A maximum-severity vulnerability in Oracle E-Business Suite is tracked as CVE-2026-101809.
- Unauthenticated attackers can exploit CVE-2026-101809 over HTTP to compromise the workflow notification mailer.
Sources
Every paragraph above points to the numbered items it rests on. Read the originals here.
- [1]Oracle patches 1295 security vulnerabilities in October, including six scoring 10.0CSO Online, 7h ago (the report this story comes from)
- [2]Oracle patched 1295 security flaws in October, six rated 10.0CIO, 7h ago
Background
- [3]Oracle on Wikipedia
- [4]Phytophthora infestans on Wikipedia
- [5]Oracle on Grokipedia
- [6]October on Grokipedia
Our newsroom writes these reports with the help of software, from the 6 sources listed and nothing else, and checks them against those sources. Facts can still be wrong or move on; the originals are the record. Spotted a mistake? Write to daniel@monsterkong.com.
Related from FTMQ Security
Earlier reports of ours on the same people and subjects.
- Google releases Chrome update addressing 37 vulnerabilities including seven critical flawsCybercrime and Scams, 8d ago
- FBI removes Accenture contractor following Oracle PeopleSoft data breachTop Stories, 17d ago
More in Top Stories
- Microsoft Teams to add artificial intelligence phishing detection in November1h ago
- BlackX UEFI bootkit targets Central Asian diplomatic entities to bypass Secure Boot5h ago
- Capcom confirms data breach exposing eleven point seven million accounts1d ago
- GitLab issues security updates for critical unauthenticated code execution vulnerability1d ago
- China aligned group Storm 0940 uses AI tool in ConnectWise breach1d ago
- Cisco patches 34 security vulnerabilities across multiple enterprise product lines1d ago
Get the day in one email
Reports like this one, the top news of the last 24 hours, every morning. Free, one email a day; readers can comment under every report.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.
Comments
Loading
Join the conversation
Comments are open to readers of our daily email: the top news of the last 24 hours, every morning, free. Sign up and the comment box opens.
Already on the list? Enter the same address and we will send a sign-in link.
By signing up you agree to our terms and privacy policy. Unsubscribe any time.