Oracle fixes CVE-2026-21992 (CVSS 9.8) flaw enabling unauthenticated RCE via HTTP, risking full system compromise.

Attackers can execute arbitrary code without authentication if Oracle's Identity or Web Services Managers are exposed to the Web.

But compared to previous Oracle updates, the first security bulletin of 2008 is small, experts say. Last's October's bulletin contained more than 50 patches and experts say that they've seen updates ...

On the surface, a recently published survey by the Independent Oracle Users Group (IOUG) bears some seemingly frightening numbers. According to the study, which was conducted during the middle of 2008 ...

Many database administrators don’t always apply security patches to their environments in a speedy fashion, but that’s not stopping Oracle Corp. from releasing dozens of them on a quarterly basis. The ...

Two-thirds of Oracle Database professionals are not applying critical patches, security company Sentrigo has found. In a survey of 305 Oracle professionals, Sentrigo found the majority did not apply ...

Last week it was Microsoft’s Patch Tuesday, this week Oracle delivers a boatload of patches. In all, the company will release 27 updates for its database, e-business suite and application server. Also ...