> ## Content Index
> Fetch the complete content index at: https://badtech.org/llms.txt
> Use this file to discover other available public pages before exploring further.

# Oracle August 2026 CPU ships 943 patches, including critical unauthenticated flaws in Fusion Middlew
- URL: https://badtech.org/oracle-august-2026-cpu-ships-943-patches-including-critical-unauthenticated-flaws-in-fusion-middlew/
- Published: 2026-08-19T23:29:15.000Z
- Updated: 2026-08-19T23:29:15.000Z
- Author: Adam Field
- Tags: Vulnerabilities

Oracle released its August 2026 Critical Security Patch Update on August 18 with 943 new patches across its enterprise software portfolio, including 262 for Fusion Middleware, 120 for E-Business Suite, and 66 for Commerce. Covered products include WebLogic Server, PeopleSoft Enterprise PeopleTools, Oracle Internet Directory, Oracle Identity Manager, WebCenter, BI Publisher, Payments, Helidon, Hyperion, and Siebel Applications.

In Fusion Middleware, Oracle lists remotely exploitable unauthenticated flaws, including CVSS 10.0 issues in Oracle Internet Directory and CVSS 9.8 issues affecting WebLogic Server and other components. Oracle says customers should apply updates as soon as possible; temporary measures such as blocking required network protocols or removing unnecessary privileges may reduce risk but can impair functionality and are not long-term fixes.

IONIX separately describes CVE-2026-60821 as an unauthenticated remote-code-execution flaw in the Business Interlink component of PeopleSoft Enterprise PeopleTools, affecting versions 8.61 through 8.63\. Oracle’s advisory also lists PeopleTools 8.61 through 8.63 among covered products.

## Operational significance

Organizations should inventory affected Oracle deployments, prioritize internet-reachable Fusion Middleware and PeopleSoft systems, and apply product-specific patches and installation guidance. For exposed PeopleSoft PeopleTools systems, IONIX recommends prioritizing the fix for CVE-2026-60821 and restricting direct internet access until patching is complete.

## Sources

- [Oracle: Oracle Critical Security Patch Update Advisory - August 2026](https://www.oracle.com/security-alerts/cspuaug2026.html?ref=badtech.org)
- [IONIX: CVE-2026-60821 – Unauthenticated Remote Code Execution / Full ...](https://www.ionix.io/threat-center/cve-2026-60821?ref=badtech.org)