On September 15, Oracle released its Critical Security Patch Update (CSPU) for September 2026. This CSPU contains fixes for 672 unique CVEs in 673 security updates across 17 Oracle product families. Out of the 673 security updates published, 15.5% of patches were assigned a critical severity. High severity patches accounted for the bulk of security patches at 74.7%, followed by critical severity patches at 15.5%.

For more information about the September 2026 CSPU release, including the availability of patches and Tenable product coverage, please visit our blog.