September 2026 Critical Security Patch Update Released

September 15, 2026 1 minute read

Oracle today released the September 2026 Critical Security Patch Update.

This Critical Security Patch Update provides security updates for a wide range of product families: Oracle Database Server, Oracle Autonomous Health Framework, Oracle Application Testing Suite, Oracle Commerce, Oracle Communications, Oracle E-Business Suite, Oracle Enterprise Manager, Oracle Financial Services Applications, Oracle Fusion Middleware, Oracle Analytics, Oracle Hyperion, Oracle Java SE, Oracle PeopleSoft, Oracle Siebel CRM, Oracle Supply Chain, Oracle Utilities Applications, Oracle Virtualization.

For more information about the September 2026 Critical Security Patch Update, customers should refer to the Critical Security Patch Update advisory located at https://www.oracle.com/security-alerts/cspusep2026.html and the executive summary published on My Oracle Support (Doc ID CPU339) .

For more information about the Critical Security Patch Update program, see the security vulnerability remediation practices page located on the Oracle Trust Center.

Integrated Cyber Center (ICC)

Oracle’s Integrated Cyber Center (ICC) serves as the enterprise hub for orchestrating Oracle’s global incident response, customer trust, and strategic security communications. By unifying people, processes, and intelligence across the organization, the ICC ensures Oracle operates as one enterprise with one voice—protecting customers, strengthening transparency, and driving continuous evolution of our collective security posture.

September 2026 Critical Security Patch Update Released

Authors

Integrated Cyber Center (ICC)

Oracle and the EU Cyber Resilience Act