Vulnerabilities in Oracle Products · CIAD-2026-0051

CERT-In Advisory CIAD-2026-0051

Multiple Vulnerabilities in Oracle Products

Original Issue Date: October 22, 2026

Severity Rating: High

Software Affected

Oracle Database Server Oracle E-Business Suite Oracle Fusion Middleware and Oracle WebLogic Server Oracle Enterprise Manager Oracle Java SE, JavaFX and GraalVM Oracle MySQL products Oracle PeopleSoft Enterprise Oracle JD Edwards EnterpriseOne Oracle Siebel CRM Oracle Analytics and BI Publisher Oracle HealthCare Applications Oracle Hospitality Applications Oracle GoldenGate Oracle REST Data Services Oracle NoSQL Database Oracle Solaris and Oracle VM VirtualBox Oracle Retail, Financial Services, Communications, Utilities and Supply Chain applications

For complete list of affected products refer to the oracle advisory: https://www.oracle.com/security-alerts/cpuoct2026.html

Overview

Multiple vulnerabilities have been reported in various Oracle products, which could be exploited by a remote attacker to trigger elevation of privilege, denial of service condition, remote code execution, data manipulation, sensitive information disclosure and security restriction bypass on the targeted system.

Target Audience: Individuals and organisational users of the above-mentioned Oracle products.

Risk Assessment: High risk of information disclosure, data manipulation, system instability and arbitrary code execution.

Impact Assessment: Potential unauthorized access to sensitive information, denial of service, data manipulation, and complete takeover of control of the target system.

Description

Oracle products are used for several applications including enterprise-level data management, cloud solutions, software development, and business applications. They are employed across a wide range of sectors, including finance, healthcare, manufacturing, government, and retail, among others.

Multiple vulnerabilities have been reported in various components of Oracle products.

Successful exploitation of these vulnerabilities could allow an attacker to trigger elevation of privilege, denial of service condition, remote code execution, data manipulation, sensitive information disclosure and security restriction bypass on the targeted system.

For complete list of affected products, CVEs, workarounds and solutions, refer to the oracle advisory: https://www.oracle.com/security-alerts/cpuoct2026.html

Solution

Apply appropriate updates as mentioned in Oracle updates: https://www.oracle.com/security-alerts/cpuoct2026.html

Vendor Information

Oracle https://www.oracle.com/security-alerts/cpuoct2026.html

References

Oracle https://www.oracle.com/security-alerts/cpuoct2026.html