Oracle published the September 2026 Critical Security Patch Update pre-release. The full advisory was due Tuesday, September 15, 2026. Bloomspire helps with Siebel upgrades, Open UI, and hosting — see our Siebel consulting.

Siebel CRM (from the pre-release):

• 63 new security patches for Siebel Applications, versions 17.0–26.7

• 26 remotely exploitable without authentication

• Highest CVSS 3.1 Base Score: 9.1

Why it matters: worth planning a patch window for after the Tuesday release. Separate from the August CSPU (17.0–26.6) already covered.

Advisory: https://www.oracle.com/security-alerts/cspusep2026.html