Oracle fixes CVE-2026-21992 (CVSS 9.8) flaw enabling unauthenticated RCE via HTTP, risking full system compromise.
Oracle ended its fiscal third quarter with $553 billion in remaining purchase obligations -- up 325% year over year.
While there is a big gap between Meta Platforms and Oracle's market caps right now, the latter can still overtake the social media giant.
Attackers can execute arbitrary code without authentication if Oracle's Identity or Web Services Managers are exposed to the Web.