Oracle Critical Patch Update October 2026 and later Security Alerts
The October 2026 Critical Patch Update (now at revision 3) lists Oracle E-Business Suite 12.2.3 to 12.2.15 among affected products, and three Security Alerts followed in late October.
Egisedge summary. The official content lives on Oracle's site; this page explains what it covers and how we use it.
CPU October 2026: released 20 Oct 2026, latest revision 4 Nov 2026; EBS 12.2.3-12.2.15 is in the affected list.
- Security Alert CVE-2026-114820 (24 Oct, rev 30 Oct): Database Server 19c, 21c and 23 releases, OPatch and Java SE.
- Security Alert CVE-2026-109618 (25 Oct, rev 6 Nov): Secure Backup, Communications products and Solaris; no EBS.
- Next dates: Critical Security Patch Updates 17 Nov and 15 Dec 2026; next CPU 19 Jan 2027.
What to do: plan the October CPU for EBS and database tiers, apply the database alert fix, and book test windows for 17 Nov and 19 Jan.