Oracle on Tuesday announced the release of its June 2026 Critical Security Patch Update (CSPU), the second since it began releasing monthly patches.
The company still releases its quarterly Critical Patch Updates, but it recently decided to supplement them with monthly patches to address more severe vulnerabilities.
The software giant said the latest round of CSPU updates delivers 245 new patches, including for Communications, E-Business Suite, Enterprise Manager, Fusion Middleware, JD Edwards, MySQL, PeopleSoft, Siebel CRM, Supply Chain, Systems, and Virtualization products.
[ Read: Oracle’s First Monthly Patches Resolve 77 Vulnerabilities ]
Roughly 120 vulnerabilities have been assigned a ‘critical’ severity rating based on CVSS score. According to Oracle, 100 flaws can be exploited remotely without authentication.








