--- title: Oracle September 2026 Critical Security Patch Update description: Oracle released its September 2026 Critical Security Patch Update (CSPU), fixing 672 unique CVEs across 673 security updates spanning 17 product families. 104... canonical: https://daily.dev/posts/oracle-september-2026-critical-security-patch-update-zvjozwyuw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Oracle September 2026 Critical Security Patch Update | daily.dev og:description: Oracle released its September 2026 Critical Security Patch Update (CSPU), fixing 672 unique CVEs across 673 security updates spanning 17 product families. 104... og:url: https://daily.dev/posts/oracle-september-2026-critical-security-patch-update-zvjozwyuw og:image: https://api.daily.dev/og/posts/ZvjozWyuw.png og:image:alt: Oracle September 2026 Critical Security Patch Update og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Oracle September 2026 Critical Security Patch Update **[Tenable Blog](https://daily.dev/sources/tenable-blog)** · 2 min read · 0 upvotes · 0 comments ## Summary Oracle released its September 2026 Critical Security Patch Update (CSPU), fixing 672 unique CVEs across 673 security updates spanning 17 product families. 104 patches (15.5%) were rated critical, with high-severity patches making up 74.7% of the total. Oracle E-Business Suite received the most patches (159, 23.6% of total), followed by Oracle Fusion Middleware (153 patches, 22.7%). The CSPU is a monthly release cycle Oracle introduced in May 2026 that sits between the larger quarterly Critical Patch Updates, addressing high-severity issues faster. Tenable plugin coverage for identifying affected systems will be published as it becomes available. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How many CVEs does Oracle's September 2026 Critical Security Patch Update fix? Oracle's September 2026 Critical Security Patch Update (CSPU) fixes 672 unique CVEs across 673 security updates. Of these, 104 patches (15.5%) were rated critical severity, while 74.7% were rated high severity. The updates span 17 Oracle product families, released on September 15, 2026. _Track Oracle's monthly CSPU releases on daily.dev to stay ahead of critical patching deadlines._ ### What is Oracle's Critical Security Patch Update (CSPU) and how does it differ from the Critical Patch Update (CPU)? The Critical Security Patch Update (CSPU) is a monthly release cycle Oracle introduced starting in May 2026 that sits between the larger quarterly Critical Patch Updates (CPUs). It addresses a focused set of high-severity issues on a faster cadence than the quarterly CPU schedule, giving organizations more frequent opportunities to patch urgent vulnerabilities. _Follow changes to vendor patch cadences like Oracle's CSPU on daily.dev to plan update cycles._ ### Which Oracle product received the most patches in the September 2026 CSPU? Oracle E-Business Suite received the highest number of patches in the September 2026 Critical Security Patch Update, with 159 patches accounting for 23.6% of the total. Oracle Fusion Middleware followed with 153 patches, representing 22.7% of the total patches issued that month. _Prioritize patching for high-impact Oracle products by keeping up with advisories on daily.dev._ ## Similar posts on daily.dev - [Oracle Critical Security Patch Update May 2026](https://daily.dev/posts/oracle-critical-security-patch-update-may-2026-zxlrz2jvd) · Tenable Blog · 0 upvotes · 0 comments - [Oracle Critical Security Patch Update August 2026](https://daily.dev/posts/oracle-critical-security-patch-update-august-2026-r6ygfhpmb) · Tenable Blog · 0 upvotes · 0 comments - [Oracle Critical Security Patch Update June 2026](https://daily.dev/posts/oracle-critical-security-patch-update-june-2026-oanshrtv4) · Tenable Blog · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#oracle](https://daily.dev/tags/oracle) [View this post on daily.dev](https://daily.dev/posts/oracle-september-2026-critical-security-patch-update-zvjozwyuw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Oracle September 2026 Critical Security Patch Update","url":"https://daily.dev/posts/oracle-september-2026-critical-security-patch-update-zvjozwyuw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/oracle-september-2026-critical-security-patch-update-zvjozwyuw"},"datePublished":"2026-09-15T21:08:47.716Z","dateModified":"2026-09-15T21:09:10.590Z","description":"Oracle released its September 2026 Critical Security Patch Update (CSPU), fixing 672 unique CVEs across 673 security updates spanning 17 product families. 104...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/cf615ed8dedcf39fa4eed40ab4a302fb?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/cf615ed8dedcf39fa4eed40ab4a302fb?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Tenable Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Tenable Blog","logo":"https://media.daily.dev/image/upload/s--B6GAvw3H--/f_auto,q_auto/v1780213271/logos/tenable-blog?_a=BAMAMiWQ0","url":"https://daily.dev/sources/tenable-blog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/oracle-september-2026-critical-security-patch-update-zvjozwyuw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,oracle","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tenable Blog","item":"https://daily.dev/sources/tenable-blog"},{"@type":"ListItem","position":3,"name":"Oracle September 2026 Critical Security Patch Update"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/oracle-september-2026-critical-security-patch-update-zvjozwyuw#faq","mainEntity":[{"@type":"Question","name":"How many CVEs does Oracle's September 2026 Critical Security Patch Update fix?","acceptedAnswer":{"@type":"Answer","text":"Oracle's September 2026 Critical Security Patch Update (CSPU) fixes 672 unique CVEs across 673 security updates. Of these, 104 patches (15.5%) were rated critical severity, while 74.7% were rated high severity. The updates span 17 Oracle product families, released on September 15, 2026. Track Oracle's monthly CSPU releases on daily.dev to stay ahead of critical patching deadlines."}},{"@type":"Question","name":"What is Oracle's Critical Security Patch Update (CSPU) and how does it differ from the Critical Patch Update (CPU)?","acceptedAnswer":{"@type":"Answer","text":"The Critical Security Patch Update (CSPU) is a monthly release cycle Oracle introduced starting in May 2026 that sits between the larger quarterly Critical Patch Updates (CPUs). It addresses a focused set of high-severity issues on a faster cadence than the quarterly CPU schedule, giving organizations more frequent opportunities to patch urgent vulnerabilities. Follow changes to vendor patch cadences like Oracle's CSPU on daily.dev to plan update cycles."}},{"@type":"Question","name":"Which Oracle product received the most patches in the September 2026 CSPU?","acceptedAnswer":{"@type":"Answer","text":"Oracle E-Business Suite received the highest number of patches in the September 2026 Critical Security Patch Update, with 159 patches accounting for 23.6% of the total. Oracle Fusion Middleware followed with 153 patches, representing 22.7% of the total patches issued that month. Prioritize patching for high-impact Oracle products by keeping up with advisories on daily.dev."}}]} ```