Oracle fixes CVE-2026-21992 (CVSS 9.8) flaw enabling unauthenticated RCE via HTTP, risking full system compromise.

eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More. Oracle issued a security alert and downloadable patch ...

Oracle will join Microsoft on next week's Patch Tuesday freight train and it will be another mega-release. The database server giant says in a pre-release announcement that it will patch a whopping 81 ...

Oracle's Critical Patch Updates keep getting bigger. The database giant addressed a number of remotely exploitable flaws in Java, MySQL, and Oracle Database this quarter Bigger is not necessarily ...

A continuing lack of corporate mandates to quickly install Oracle’s security patches may be leaving many Oracle database installations exposed to vulnerabilities for extended periods of time, ...

eWEEK content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More. Oracle released 45 security fixes July 15 as part of its ...

A security researcher today criticized Oracle for neglecting to patch its core database products, noting that the massive update slated for later Tuesday will set a record for the fewest fixes. Alex ...