Oracle has patched 153 vulnerabilities across multiple Oracle Fusion Middleware products including WebLogic Server, Access Manager, Forms, Internet Directory, and Platform Security for Java. Of these, 66 are rated critical and 78 can be exploited remotely without authentication. Five vulnerabilities (CVE-2026-71133, CVE-2026-83099, CVE-2026-83059, CVE-2026-83020, CVE-2026-83021) carry the maximum CVSS score of 10.0. Successful exploitation can lead to arbitrary code execution, authentication bypass, unauthorized data access, data modification or deletion, and Denial-of-Service. The NCSC advises organizations to prioritize applying security updates for the critical vulnerabilities immediately.