Oracle issues fixes for 1295 flaws in October, six rated 10.0

First reported 23 Oct, 17:59 UTCSource: CSO OnlineLast editorial activity 23 Oct, 17:59 UTCWrite a comment ↓

White security camera mounted on a pole under a clear blue sky, symbolizing security and surveillance. — Illustrative photo.Photo by Jan van der Wolf on PexelsOracle logo shown for identification only; no affiliation with or endorsement of WORLDTECH is implied.

Oracle has patched 1295 security vulnerabilities through its October Critical Patch Update Advisory, six of them carrying the top score of 10.0 on the CVSS version 3.1 scale, according to a single outlet's report.

Critical flaws in E-Business Suite and SOA Suite

Among the most severe issues is CVE-2026-101809, which affects the flagship Oracle E-Business Suite. An unauthenticated attacker with network access over HTTP could compromise the workflow notification mailer in the suite's Workflow component, which could allow a takeover of Workflow and potentially affect other products. Versions 12.2.3 through 12.2.15 are affected.

Three of the 10.0-rated bugs were found in Oracle SOA Suite, part of Oracle Fusion Middleware. One of them, CVE-2026-91231, is in the Adapters component and lets unauthenticated attackers compromise and take over SOA Suite, with potential impact on connected products.

About the company

Oracle is a software development and information technology consulting company based in Redwood Shores. Its products and services include software.

Open questions

Have any of the 10.0-rated flaws been exploited in the wild?

What Matters Now

Detailed view of a cutting-edge industrial robotic arm in action. — Photo: Freek Wolsink / Pexels

Robotics

NVIDIA Releases Nemotron 3.5 Bolt E4B 4GB: An Open Small Language Model for Local Voice Agents, Game Characters and Robots

Source: MarkTechPost ·24 Oct, 05:26 UTC

Closeup of many cables with blue wires plugged in modern switch with similar adapters on blurred background in modern studio — Photo: Brett Sayles / Pexels

UK commits approximately £600 million to AI security, with a biosecurity lab at the center

Source: Crypto Briefing ·24 Oct, 06:00 UTC

Close-up of stock market trading screen displaying financial growth and charts. — Photo: Alesia Kozik / Pexels

Bitcoin & Crypto

Ali Yahya Leaves a16z as Its Newest Crypto Fund Opens to AI Startups

Source: Unchained ·24 Oct, 06:00 UTC

Key facts

Oracle released fixes for 1295 security vulnerabilities in its October Critical Patch Update Advisory.
Six of the vulnerabilities scored 10.0 on the CVSS version 3.1 scale.
One of the 10.0-rated flaws, CVE-2026-101809, sits in Oracle E-Business Suite.

Sources & evidence

CSO Online Reporting source
Oracle patches 1295 security vulnerabilities in October, including six scoring 10.0 ↗
https://www.csoonline.com/article/4239850/oracle-patches-1295-security-vulnerabilities-in-october-including-six-scoring-10-0-2.html