9.8
Critical
CVE-2026-60432 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System)
Description
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle Solaris | 11.4 | No fix stated |
| Oracle Solaris | 11.3 | No fix stated |
References
- Oracle Advisory www.oracle.com
Timeline
- Published
- Last modified
Other CVEs of Oracle Solaris
The 44 CVEs of Oracle Solaris →
CVE-2026-91537
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
7.8
High
CVE-2026-91348
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
8.4
High
CVE-2026-91336
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
6.5
Medium
CVE-2026-91324
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries)
4.7
Medium