Oracle announced a quarterly security patch release that includes 1,449 patches, the largest number to date, and spans multiple products, creating a heavy workload for administrators.

The release is part of Oracle’s regular quarterly security fixes and, since May 2026, includes monthly Critical Security Patch Updates for the most severe vulnerabilities. Oracle’s Integrated Cyber Center said customers can use My Oracle Support, Technical Account Management, and Customer Success for assistance.

Internal researchers were credited with discovering most of the vulnerabilities, while external researchers identified 64 of them, according to Oracle’s acknowledgments. Ten patches received a CVSS score of 10.0, all affecting Oracle Fusion Middleware, and the Dutch NCSC said the two vulnerabilities CVE‑2026‑47056 and CVE‑2026‑60217 are easily exploitable. Additional high‑severity issues include CVE‑2026‑61211 (score 9.9) and CVE‑2026‑47040 (score 9.1), which the Dutch NCSC described as allowing remote code execution or denial of service.

Security experts said the volume reflects a broader industry shift toward AI‑assisted vulnerability detection. They noted that the increased number of patches places a greater operational burden on IT teams, who must prioritize critical fixes without disrupting business operations. Microsoft has also observed larger Patch Tuesday updates and recommended using automated patching tools to ease the workload.

Oracle expects the higher frequency of patches to continue as AI tools become more prevalent in security testing, leaving organizations to balance rapid remediation with system stability.