Oracle Critical Security Patch Update for August 2026 is Available

The Critical Security Patch Update (CSPU) for August 2026 is available now. CSPUs provide security updates for a wide range of Oracle product families, including JD Edwards. These monthly updates offer customers security fixes in a smaller, focused format, making them easier to apply.

Action required: Apply CSPUs without delay

Oracle recommends that customers remain on supported product versions and apply security patches as soon as possible. The August 2026 Critical Security Patch Update Advisory has detailed information about the vulnerabilities fixed in this update. The executive summary is published on My Oracle Support (MOS) (Doc ID CPU294).

If your organization uses other Oracle products along with JD Edwards, the advisory offers you a comprehensive look at vulnerabilities addressed across all Oracle products.

MOS article for JD Edwards

The August CSPU contains 6 new security patches for JD Edwards EnterpriseOne. 2 of these vulnerabilities may be remotely exploitable without authentication. This document defines JD Edwards EnterpriseOne patches and minimum releases that are required to address the security vulnerabilities announced in the August advisory. The downloadable CPU333_JDE_E1_PAD_081826 document within the MOS article details applicable CSPU patches, resolutions and instructions.

Other Oracle Security advisories

Prior Critical Patch Update (CPU) and CSPU advisories provide insight into published security patches. If your organization has missed security updates, leaving you concerned about products that do not have security patches announced in this CSPU, the Critical Patch Updates, Critical Security Patch Updates, Security Alerts and Bulletins lists previous announcements of security fixes.

Here’s a schedule for upcoming CPU and CSPUs for the year to help you stay prepared: