Back to Fastnexa
Under attack?
CyberBrief
Subscribe
Fastnexa

Oracle Corporation security advisory (AV26-1071)

MediumCanadian Centre for Cyber Security · Canadian Centre for Cyber Security·

At a glance

Severity
Medium
Used in attacks
No flaws named
Vendors and products
Oracle
Reported by
1 outlet

As of October 20, 2026, Oracle Corporation is affected by vulnerabilities in the following products:

  • Helidon
  • JD Edwards EnterpriseOne Configurator
  • JD Edwards EnterpriseOne General Ledger
  • JD Edwards EnterpriseOne Homebuilder
  • JD Edwards EnterpriseOne Human Resources Management
  • JD Edwards EnterpriseOne Localizations
  • JD Edwards EnterpriseOne Operational Sourcing
  • JD Edwards EnterpriseOne Orchestrator
  • JD Edwards EnterpriseOne Sales Order Entry
  • JD Edwards EnterpriseOne Tools
  • MySQL Client
  • MySQL Cluster
  • MySQL Connectors
  • MySQL Enterprise Backup
  • MySQL Router
  • MySQL Server
  • MySQL Server, MySQL Cluster
  • Oracle APEX
  • Oracle Access Manager
  • Oracle Agile Engineering Data Management
  • Oracle Agile PLM
  • Oracle Agile PLM MCAD Connector
  • Oracle Agile Product Lifecycle Management for Process
  • Oracle Application Testing Suite
  • Oracle Autonomous Health Framework
  • Oracle BI Publisher
  • Oracle Business Intelligence Enterprise Edition
  • Oracle Business Process Management Suite
  • Oracle Coherence
  • Oracle Commerce Platform
  • Oracle Communications BRM - Elastic Charging Engine
  • Oracle Communications Billing and Revenue Management
  • Oracle Communications Cloud Native Core Binding Support Function
  • Oracle Communications Cloud Native Core Certificate Management
  • Oracle Communications Cloud Native Core Console
  • Oracle Communications Cloud Native Core Network Repository Function
  • Oracle Communications Cloud Native Core Network Slice Selection Function
  • Oracle Communications Cloud Native Core Policy
  • Oracle Communications Cloud Native Core Security Edge Protection Proxy
  • Oracle Communications Cloud Native Core Service Communication Proxy
  • Oracle Communications Cloud Native Core Unified Data Repository
  • Oracle Communications EAGLE Element Management System
  • Oracle Communications EAGLE LNP Application Processor
  • Oracle Communications LSMS
  • Oracle Communications Network Analytics Data Director
  • Oracle Communications Operations Monitor
  • Oracle Communications Policy Management
  • Oracle Communications Service Catalog and Design
  • Oracle Communications Unified Assurance
  • Oracle Communications Unified Inventory Management
  • Oracle Data Integrator
  • Oracle Database Server
  • Oracle Demand Planning
  • Oracle E-Business Suite
  • Oracle Enterprise Manager Base Platform
  • Oracle Enterprise Manager for Oracle Database
  • Oracle Enterprise Manager for Siebel
  • Oracle Enterprise Manager for Virtualization
  • Oracle Essbase
  • Oracle Financial Services Analytical Applications Infrastructure
  • Oracle Financial Services Behavior Detection Platform
  • Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
  • Oracle Fusion Middleware
  • Oracle Fusion Middleware Control
  • Oracle Global Lifecycle Management NextGen OUI Framework
  • Oracle Global Lifecycle Management OPatch
  • Oracle Global Lifecycle Management OPatchAuto
  • Oracle GoldenGate
  • Oracle GoldenGate Big Data and Application Adapters
  • Oracle GoldenGate Stream Analytics
  • Oracle GraalVM Enterprise Edition
  • Oracle GraalVM for JDK
  • Oracle HTTP Server
  • Oracle Health Sciences Information Manager
  • Oracle Healthcare Data Repository
  • Oracle Healthcare Master Person Index
  • Oracle Hospitality Cruise Shipboard Property Management (SPMS)
  • Oracle Hospitality OPERA 5 Property Services
  • Oracle Identity Manager
  • Oracle Identity Manager Connector
  • Oracle JDeveloper
  • Oracle Java SE
  • Oracle JavaFX
  • Oracle Managed File Transfer
  • Oracle Management Pack for Oracle GoldenGate
  • Oracle Middleware Common Libraries and Tools
  • Oracle NoSQL Database
  • Oracle Outside In Technology
  • Oracle Product Lifecycle Analytics
  • Oracle REST Data Services
  • Oracle Retail Merchandise Financial Planning
  • Oracle Retail Merchandising System
  • Oracle Retail Predictive Application Server
  • Oracle Retail Xstore Point of Service
  • Oracle SOA Suite
  • Oracle SQL Developer
  • Oracle Secure Backup
  • Oracle Service Bus
  • Oracle Solaris
  • Oracle TimesTen In-Memory Database
  • Oracle Trusted Answer Search
  • Oracle Utilities Network Management System
  • Oracle VM VirtualBox
  • Oracle Web Services Manager
  • Oracle WebCenter Content
  • Oracle WebCenter Portal
  • Oracle WebCenter Sites
  • Oracle WebLogic Server
  • Oracle Weblogic Server Proxy Plug-in
  • Oracle ZFS Storage Appliance Kit
  • PeopleSoft Enterprise CC Common Application Objects
  • PeopleSoft Enterprise FIN Cash Management
  • PeopleSoft Enterprise FIN Common Objects Argentina
  • PeopleSoft Enterprise FIN Common Objects Brazil
  • PeopleSoft Enterprise FIN General Ledger Brazil
  • PeopleSoft Enterprise FIN Inventory Brazil
  • PeopleSoft Enterprise FIN Manufacturing Brazil
  • PeopleSoft Enterprise FIN Product Configurator Brazil
  • PeopleSoft Enterprise HCM Global Payroll Switzerland
  • PeopleSoft Enterprise HCM Human Resources
  • PeopleSoft Enterprise PeopleTools
  • PeopleSoft Enterprise SCM Manufacturing
  • PeopleSoft Enterprise SCM Purchasing
  • PeopleSoft Enterprise SCM Strategic Sourcing
  • Primavera Gateway
  • Primavera Unifier
  • Siebel Applications
  • WebCenter Content: Imaging

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

Originally published by Canadian Centre for Cyber Security. © Canadian Centre for Cyber Security. Written by Canadian Centre for Cyber Security.

Read at cyber.gc.ca ↗Official Source

Fastnexa security experts

Dealing with this in your own company?

If this story touches software, suppliers or systems you use, a Fastnexa security expert can tell you what it means for you and what to do first.

Book a 30-min callWhatsApp us

Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →

Coverage

One outlet has carried this so far.

  1. Canadian Centre for Cyber Security ↗Official SourceFirst reported

    2026-10-21 18:28 UTC

Related stories