CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

Oracle security advisory – July 2026 quarterly rollup (AV26-729)

critical
Serial number: AV26-729 Date: July 22, 2026 On July 21, 2026, Oracle published a security advisory to address vulnerabilities in multiple products. Included were critical updates for the following: Oracle Database Server Oracle APEX Oracle Autonomous Health Framework Oracle Essbase Oracle Global Lifecycle Management Oracle GoldenGate Oracle NoSQL Database Oracle Spatial Studio Oracle SQL Developer Oracle TimesTen In-Memory Database Oracle Application Testing Suite Oracle Commerce Oracle Communications Oracle Construction and Engineering Oracle E-Business Suite Oracle Enterprise Manager Oracle Financial Services Applications Oracle Food and Beverage Applications Oracle Fusion Middleware Oracle Analytics Oracle HealthCare Applications Oracle Hospitality Applications Oracle Java SE Oracle JD Edwards Oracle MySQL Oracle PeopleSoft Oracle Retail Applications Oracle Siebel CRM Oracle Supply Chain Oracle Systems Oracle Utilities Applications Oracle Virtualization The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates. Oracle Critical Patch Update Advisory – July 2026

CSIRTS triage

What
Oracle published a security advisory addressing vulnerabilities in multiple products.
Who is affected
Users of various Oracle products.
Urgency
Remediation is critical due to the number of products affected.
Action
Review and apply the latest updates for all affected Oracle products.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source
Canadian Centre for Cyber Security (CA · national-cert · site)
Severity
critical
Published
2026-07-22
Exploitation
Not in CISA KEV at last sync

Original advisory: https://cyber.gc.ca/en/alerts-advisories/oracle-security-advisory-july-2026-quarterly-rollup-av26-729

More from Canadian Centre for Cyber Security