HKCERT said in a security bulletin on 21 October 2026 that several vulnerabilities were found in Oracle products. A vulnerability is a flaw that attackers can misuse. HKCERT said a remote attacker, one working over a network, could exploit some of them. The results could include a denial of service, where a system stops working for its users. Other flaws could give an attacker higher access rights, get around security limits, or expose sensitive data. Some could allow remote code execution, which means running the attacker's own commands.
The bulletin leaves a lot open. It does not say how many flaws there are or which Oracle products and versions are affected. It gives no severity ratings. It does not say whether anyone is already attacking these flaws. It also says only some of the flaws could be used for the harms listed, not that each one allows all of them. For other Oracle products, HKCERT pointed readers to Oracle's security alerts page. It also told users to check the vendor's website before installing the software.
The bulletin alone does not tell Oracle customers whether their own systems are affected. Teams that run Oracle software will need Oracle's page for product details, which HKCERT points readers to.