❌

Normal view

Oracle’s July update fixes ten 10.0 vulnerabilities in Fusion Middleware

22 July 2026 at 19:18

Oracle’s July 2026 Critical Patch Update, its largest ever, contains 1,449 new security patches spanning 32 product families, from Oracle Database and E-Business Suite to PeopleSoft, GoldenGate, Java SE, and Fusion Middleware.

Fusion Middleware was particularly hard hit, with new security patches for 355 security vulnerabilities, 219 of them remotely exploitable without authentication, meaning they can be exploited over a network without requiring user credentials. Ten of them scored a “perfect” 10.0 on the Common Vulnerability Scoring System (CVSS).

These included easily exploitable vulnerabilities allowing unauthenticated attackers with network access via HTTP to compromise Oracle Data Integrator, Oracle Access Manager, Oracle HTTP Server, Oracle Platform Security for Java, Oracle WebCenter Content, Service Delivery Platform, or Oracle Weblogic Server Proxy Plug-in,

No other products were found to have quite such extreme vulnerabilities, but there were plenty of others scoring almost as badly.

Two critical flaws in Oracle Database Server

The most severe flaw Oracle patched in its flagship database product is CVE-2026-61211, a vulnerability in the RDBMS component’s DBMS_CLOUD package with a CVSS score of 9.9.

This easily exploitable vulnerability allows a low-privileged attacker having Execute DBMS_CLOUD privilege with network access via Oracle Net to compromise the RDBMS, Oracle said in the patch update statement. “While the vulnerability is in RDBMS, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of RDBMS,” it warned.

The flaw affects Database Server versions 19.3 through 19.31 and 23.4.0 through 23.26.2.

Sanchit Vir Gogia, chief analyst at Greyhound Research, said the 9.9 score should be read as serious but conditional. Exposure depends on configuration, he said: On customer-managed databases, DBMS_CLOUD is absent until installed, and grants and network access lists determine the radius from there. “Where DBMS_CLOUD is broadly granted and reachable, the emergency is real and the window is seventy-two hours; where it is absent, the accelerated database wave will do.”

Vibhum Dubey, a cybersecurity researcher and red teamer, said the flaw stood out to him because it checks several boxes that concern defenders.

“Database servers often hold an organization’s most valuable data, so even if exploitation is not publicly observed yet, I don’t think this is the kind of issue you leave until the next routine maintenance window if your environment is exposed,” Dubey said.

A second Database Server flaw, CVE-2026-47040, affects Connection Manager in Oracle Net Services, is remotely exploitable without credentials. Oracle’s risk matrix lists six Database Product vulnerabilities in this cycle as reachable over a network with no authentication required, the statement added.

CVE-2026-7383, an OpenSSL-related TLS vulnerability, affects two products, Database Server and Autonomous Health Framework, since both bundle the same third-party component. Oracle’s advisory notes the Database Server patch for that CVE also resolves 19 related OpenSSL CVEs bundled into the same fix.

Oracle GoldenGate received 27 new patches, nine of which do not require authentication to exploit, including CVE-2026-2332, a flaw in the Big Data and Application Adapters component tied to Eclipse Jetty, the statement added.

There were also two critical flaws in Oracle’s TimesTen in-memory database.

The remainder of the release spans E-Business Suite, WebLogic Server, PeopleSoft, Siebel, JD Edwards, Communications, Retail Applications, Utilities Applications, MySQL, Solaris and VM VirtualBox.

Volume repair

Gogia said the volume itself marks a shift.

“At 1,449 patches, against 481 in April 2026 and 309 a year earlier, patch load has outgrown the queue built to hold it,” he said. He recommended a tiered response: “The reachable and the reported inside seventy-two hours, the trusted core inside ten days, the rest by risk before the October release.”

He also flagged a specific risk in how organizations might triage E-Business Suite. “Oracle’s advisory concedes that E-Business Suite exposure sits partly in underlying Database and Fusion Middleware versions outside the E-Business Suite matrix. The fastest way to mis-prioritise this release is to patch by product logo instead of trust boundary.”

Third Tuesday, quarterly cycle

The July release is the third quarterly Critical Patch Update of 2026, and the first since the introduction in May of the monthly Critical Security Patch Update program.

Gogia said Oracle has effectively layered a second cadence on top of the existing one rather than replacing it.

“Quarterly Critical Patch Updates remain and stay cumulative; monthly Critical Security Patch Updates now sit on top,” he said, adding that enterprise adoption of the new rhythm remains low because of “certification obligations, regression exposure and scarce specialist hours.”

Dubey made a similar point about organizational readiness: “In large enterprises, patching is rarely a technical problem. It is an operational one. Database administrators, application owners, infrastructure teams, business stakeholders, and change advisory boards all have to align.”

Niyati Daftary, principal analyst at Gartner, said the release underscores a broader shift in how patching is approached.

“Patching is no longer a race to remediate every vulnerability. It is a discipline of identifying the exposures that matter most and reducing business risk as efficiently as possible,” she said, adding that organizations should prioritize based on exposure, business impact and exploitability, starting with internet-facing assets and mission-critical systems.

Daftary pointed to continuous threat exposure management and adversarial exposure validation as increasingly relevant frameworks, since CVSS scores “measure theoretical severity rather than actual enterprise risk.” Patching alone will not be sufficient, Daftary said, and organizations should continue investing in defense in depth, including behavioral threat detection and incident response.

Oracle’s next cumulative Critical Patch Update will come on Oct. 20, 2026, with smaller Critical Security Patch Updates on Aug. 18 and Sept. 15.

This article first appeared on CSO.

New AI database reduces hallucinations by 78% and delivers answers 20 times faster

20 June 2026 at 16:07

Artificial intelligence is becoming increasingly important in businesses, helping employees search through large amounts of documents and answer complex questions. However, one major problem still limits the use of AI in many industries: hallucinations. An AI hallucination happens when a system generates information that sounds convincing but is actually wrong. This can be a serious […]

The post New AI database reduces hallucinations by 78% and delivers answers 20 times faster appeared first on Knowridge Science Report.

Retinal Imaging Reveals Key Predictors of Alzheimer’s Disease Risk

16 June 2026 at 23:11

Often hailed as “the window to the soul,” the human eye has long fascinated scientists and philosophers alike. However, beyond its poetic allure, emerging research suggests that the eyes provide a vital window into the health of the brain. A groundbreaking new study spearheaded by the University of Florida’s biomedical engineering department has unveiled a transformative approach to predicting Alzheimer’s disease risk factors by analyzing retinal photographs with cutting-edge deep learning algorithms. This development promises to revolutionize early detection and intervention for one of the most devastating neurodegenerative diseases.

Traditionally, diagnosing Alzheimer’s disease has been a challenge due to its insidious onset and prolonged development over decades. Most diagnostic protocols focus on detecting the disease in its later stages, by which time significant, irreversible brain damage has already occurred. Recognizing this limitation, Dr. Ruogu Fang and her interdisciplinary team leveraged advances in artificial intelligence and biomedicine to explore the retina—a part of the central nervous system accessible via non-invasive imaging—as a potential biosensor for Alzheimer’s risk.

The study capitalized on a rich database of over 40,000 retinal images collected from the UK Biobank, a comprehensive health resource with longitudinal patient data. Retinal photography is commonly conducted during routine eye exams, diabetes management, glaucoma monitoring, and cataract assessments. By harnessing these widely available, inexpensive images, the research team circumvented the need for costly, invasive, or logistically complex diagnostic tools such as MRI or PET scans, thus holding promise for scalable, population-wide screening.

Employing deep learning, a subset of machine learning characterized by neural networks modeled after the human brain, the researchers developed an AI framework that scrutinized retinal morphology. This model was able to discern subtle variations in retinal arteries, veins, and the optic nerve head, features imperceptible to the human eye but correlated strongly with known risk factors for Alzheimer’s disease. Such morphological markers serve as proxies for neurovascular health, which is crucial given Alzheimer’s recognized association with vascular impairment.

One of the most striking revelations of this research was the model’s capacity not only to predict intrinsic biological traits such as sex and blood pressure but also modifiable lifestyle factors that influence Alzheimer’s risk. The AI effectively inferred behaviors like smoking, alcohol consumption, and even insomnia from retinal images alone. This objective measurement circumvents the notorious unreliability of self-reported lifestyle data, often plagued by bias and inaccuracies, thereby enriching risk assessment precision.

As Dr. Fang points out, retinal morphology functions less like a mere clinical questionnaire and more like an integrative biological sensor reflecting a cumulative lifetime burden of neurovascular and lifestyle insults. This conceptual shift underscores the retina’s role in encapsulating decades of physiological data, transforming retinal imaging into a powerful tool for capturing both present health and future vulnerability.

Furthermore, the implications extend beyond risk prediction. Identifying individuals with early signs of retinal changes could trigger timely clinical interventions long before cognitive symptoms manifest. Such preclinical detection enables the implementation of protective lifestyle adjustments, pharmacological therapies, or cognitive training programs designed to delay or mitigate Alzheimer’s progression.

The pioneering work built on previous findings from Fang’s group that demonstrated retinal images’ utility in detecting active Alzheimer’s disease cases. However, this new model pioneers the field by focusing on prodromal markers and risk factors instead of established dementia, bridging a critical gap in neurodegenerative diagnostics.

Importantly, the use of retinal photographs democratizes neurovascular health monitoring. Since retinal imaging is non-invasive, accessible, and affordable, it offers the prospect of integrating brain health assessment into routine eye care, thus expanding preventive neurology beyond specialized clinical settings.

This research also exemplifies the synergy between computational science and biomedical engineering. By combining sophisticated image analysis algorithms with large-scale patient data, it transcends traditional diagnostic constraints, marrying technology with medicine in a profoundly impactful manner.

While challenges remain, including the need for further validation across diverse populations and integration with other biomarkers, this study sets a new paradigm for early Alzheimer’s disease risk stratification. The possibility of preemptive interventions guided by retinal AI analysis heralds a future where the devastating trajectory of Alzheimer’s may be altered through timely and personalized healthcare.

In summary, the novel application of deep learning to retinal photographs opens an unprecedented window into brain health, heralding a new era of precision neurodiagnostics. It moves us closer to the long-sought goal of identifying Alzheimer’s risk decades in advance, fostering opportunities for early intervention and ultimately, better patient outcomes.


Subject of Research: People

Article Title: Prediction of Alzheimer’s disease risk factors from retinal images via deep learning: Development and validation of biologically relevant morphological associations in the UK Biobank

News Publication Date: 16-Jun-2026

Web References:
DOI: 10.1177/13872877261457650


Keywords

Alzheimer’s disease, Neurodegenerative diseases, Neurological disorders, Eye, Retina, Artificial intelligence, Image analysis, Deep learning, Biomedical engineering, Neurovascular integrity, Retinal biomarkers, Predictive modeling

❌