Oracle Issues June 2026 Critical Patch: Hundreds of Vulnerabilities Fixed
Across Product Lines
Oracle has
released its June 2026 Critical Security Patch Update, addressing hundreds of
vulnerabilities across its expansive product portfolio including
Communications, E-Business Suite (EBS), Enterprise Manager, and various cloud
services. The quarterly update is among Oracle's most significant, with several
critical flaws rated at the highest CVSS severity scores.
Among the
vulnerabilities addressed is CVE-2026-35273, which Oracle has mitigated but has
not publicly confirmed as actively exploited in the wild as of mid-June.
Security researchers have noted that the lack of transparency around
exploitation status complicates risk prioritization for enterprise customers.
The update
follows a pattern of increasingly complex patching requirements for Oracle
customers, who must navigate hundreds of individual advisories across multiple
product lines. Oracle's Global Head of Cyber Defense, Jonathan Trull, who
recently joined the company, has signaled a commitment to improving
communication with customers around vulnerability management.
Organizations
running Oracle products are urged to apply the June 2026 Critical Patch Update
without delay. Security teams should consult Oracle's official advisory
documentation to understand which product versions are affected and prioritize
patches based on internet exposure and data sensitivity.
Comments