The Critical Patch Update (CPU) for July 2026 was released on 21 July 2026. The July 2026 Critical Patch Update (CPU) is the largest EBS security release to date, reflecting expanded product coverage, AI-powered identification of actionable security findings, accelerated security engineering processes, and the broader scope of quarterly CPUs. 

Action Required: Apply the CPU Promptly

Oracle Security Updates are released on the third Tuesday of each month. Oracle strongly encourages you and your team – if you haven’t already – to move immediately to a monthly security patching cycle. Start by applying the updates published in the July 2026 CPU.

MOS Article for EBS CPUs

A link to the latest available Oracle E-Business Suite CPU document is available in Identifying the Latest Monthly and Quarterly Critical Patch Update for Oracle E-Business Suite Release 12.2 (MOS Article ID KA923).  We recommend you bookmark MOS Article ID KA923

Oracle Security Update Announcements

The Critical Patch Update Advisory is the starting point for reviewing all Oracle Critical Patch Update Advisories, Critical Security Patch Update Advisories, Security Alerts and Bulletins. It includes a list of products affected, risk matrices of fixed vulnerabilities, and links to other important documents.

Critical Patch Advisory Page

It is essential to review the supporting documentation referenced in the Critical Security Patch Updated Advisory before applying patches.

The next four Critical Security Patch Update release dates are:

  • 18 August 2026
  • 15 September 2026
  • 17 November 2026
  • 15 December 2026

The next four Critical Patch Update release dates are:

  • 20 October 2026
  • 19 January 2027
  • 20 April 2027
  • July 2027

Additional References

Related Articles