# Oracle Releases 1,449 Security Patches

Security updates in software ecosystems are becoming the new norm.

- **Source:** [www.theregister.com - Articles (theregister.co.uk)](https://brifing.si/source/e6d4ec13-4d0e-407a-b96d-39609d76c3b1)
- **Published:** 2026-07-23
- **Topic:** [Software & Engineering](https://brifing.si/c/engineering)
- **Original article:** <https://www.theregister.com/security/2026/07/23/oracle-drops-1449-security-patches-like-its-the-new-normal/5277114>
- **On Brifing:** https://brifing.si/s/08c15cd2-62aa-42d4-90a8-58d6be1a0ee7

## Oracle's Massive Security Update

Oracle has released 1,449 patches as part of its quarterly security fixes. This record number reflects the company's AI-assisted vulnerability detection efforts announced in April. Given Oracle's vast product portfolio, the patch count is not surprising.

## The Growth of Security Ecosystems

Experts note that while the sheer volume of patches may seem alarming, it reflects the size of modern software ecosystems and the shift toward automated security scanning. The real challenge lies in the operational strain on enterprise IT teams to separate critical threats from routine fixes.

## AI's Increasing Role

AI-assisted vulnerability detection is increasing the volume of security updates. Microsoft's Patch Tuesday updates show a similar trend. While AI keeps defense teams busier, the use of automated patching tools is recommended.

## Oracle's New Approach

Starting in 2026, Oracle will supplement quarterly updates with monthly critical patches. This new approach allows customers to apply critical fixes more quickly while maintaining established quarterly update cycles.

## The Most Critical Vulnerabilities

Only 10 of the 1,449 patches carry a maximum CVSS score. All of these affect Oracle Fusion Middleware. The Dutch NCSC flagged CVE-2026-47056 and CVE-2026-60217 as particularly dangerous.

## Database Security Under Threat

CVE-2026-61211 and CVE-2026-47040, affecting Oracle Database Server, pose high risks. These vulnerabilities allow attackers to execute remote code and take over the database. Customers are urged to apply updates immediately.

## Sources covering this story

- https://www.theregister.com/security/2026/07/23/oracle-drops-1449-security-patches-like-its-the-new-normal/5277114 — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._
