Tenable

Oracle Releases January 2026 Critical Patch Update Addressing 337 Vulnerabilities

First seen 22 Jan 2026, 02:59 UTC • Tenable

+2 •84% similarity •50.8

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

On January 20, 2026, Oracle released its Critical Patch Update (CPU) for January 2026, addressing 337 security vulnerabilities across 122 products. This update includes fixes for 158 unique CVEs, with 27 patches classified as critical, impacting various Oracle product families such as databases and middleware.

ThreatCluster AI

Attack Flow

16 entities, 29 inferred relationships (STIX 2.1).

Technique (1)

Data Breach

Campaign (1)

Admin Action Day

Organization (1)

Oracle

Vulnerability (5)

CVE-2021-35587
CVE-2025-54988
CVE-2025-66516
CVE-2026-21962
CVE-2026-21977

Affected Platform (8)

Oracle E-business Suite
Oracle Enterprise Manager
Oracle HTTP Server
Oracle Middleware Common Libraries And Tools
Oracle VM VirtualBox
Oracle Weblogic Server Proxy Plug-in
Zero Data Loss Recovery Appliance
Apache Tika

Relationships

CVE-2021-35587 targets Oracle E-business Suite
CVE-2021-35587 targets Oracle Enterprise Manager
CVE-2021-35587 targets Oracle HTTP Server
CVE-2021-35587 targets Oracle Middleware Common Libraries And Tools
CVE-2025-54988 targets Oracle E-business Suite
CVE-2025-54988 targets Oracle Enterprise Manager
CVE-2025-54988 targets Oracle HTTP Server
CVE-2025-54988 targets Oracle Middleware Common Libraries And Tools
CVE-2025-66516 targets Oracle E-business Suite
CVE-2025-66516 targets Oracle Enterprise Manager
CVE-2025-66516 targets Oracle HTTP Server
CVE-2025-66516 targets Oracle Middleware Common Libraries And Tools
CVE-2026-21962 targets Oracle E-business Suite
CVE-2026-21962 targets Oracle Enterprise Manager
CVE-2026-21962 targets Oracle HTTP Server
CVE-2026-21962 targets Oracle Middleware Common Libraries And Tools
CVE-2026-21977 targets Oracle E-business Suite
CVE-2026-21977 targets Oracle Enterprise Manager
CVE-2026-21977 targets Oracle HTTP Server
CVE-2026-21977 targets Oracle Middleware Common Libraries And Tools
Data Breach targets Oracle E-business Suite
Data Breach targets Oracle Enterprise Manager
Data Breach targets Oracle HTTP Server
Data Breach targets Oracle Middleware Common Libraries And Tools
Admin Action Day related to Oracle
Admin Action Day related to Oracle VM VirtualBox
Admin Action Day related to Oracle Weblogic Server Proxy Plug-in
Admin Action Day related to Zero Data Loss Recovery Appliance
Admin Action Day related to Apache Tika

Community

Browse all →

Oracle Releases January 2026 Critical Patch Update Addressing 337 Vulnerabilities

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading