Oracle to Release Monthly Critical Security Patch Updates (CSPUs)

April 30, 2026 1 minute read

Product Management Director

Artificial intelligence (AI) has significantly accelerated the pace at which software vulnerabilities are discovered, increasing the urgency for rapid response and remediation. In light of this shift, Oracle has introduced an updated approach to delivering security fixes.

Beginning in May 2026, Oracle will move to a monthly release cycle for Critical Security Patch Updates (CSPUs), enabling faster protection against emerging threats. For additional details, see: Accelerating Vulnerability Detection and Response at Oracle.

Oracle will continue to deliver its quarterly Critical Patch Updates (CPUs), maintaining its established security release cadence. For more information, see: Critical Patch Updates, Security Alerts and Bulletins

Elke Phelps

Product Management Director

Elke is a Product Manager in the Oracle E-Business Suite Applications Technology Group. She joined Oracle in 2011 after having been an Oracle customer and Oracle Technologist (Oracle Database Administrator, Oracle Applications DBA, Technical Architect and Technical Manager of an Oracle Applications DBA Team) since 1993. As part of the Oracle E-Business Suite Applications Technology Product Management Team, her scope of responsibility includes security, database certifications and advanced architectures for on-premises and Oracle Cloud deployments. She is a frequent contributor and editor of the Oracle E-Business Suite Technology Blog. Elke is the lead author of the Oracle Applications DBA Field Guide (Apress 2006) and Oracle R12 Applications DBA Field Guide (Coqui Tech and Press 2010). Elke is also the founder of the Oracle Applications User Group (OAUG) E-Business Suite Applications Technology Special Interest Group (SIG) and served as President of the SIG from February 2005 - August 2011. Elke has been a speaker at the Oracle OpenWorld and Collaborate conferences since 2004. Prior to joining Oracle, Elke was designated an Oracle ACE (2007) and Oracle ACE Director (2009). She received the OAUG Oracle Ambassador of the Year award in 2015. Elke has a Computer Science Degree and a Masters of Business Administration from the University of Oklahoma. In her spare time, Elke enjoys traveling especially to Europe, Puerto Rico and the amazing US National Parks. Elke also enjoys hiking, antiquing, gardening and cooking.

Oracle to Release Monthly Critical Security Patch Updates (CSPUs)

Authors

Elke Phelps

Product Management Director

JRE 1.8.0_491 Certified with EBS Release 12.2