8.4
High
CVE-2026-91348 Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
Description
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle Solaris | 11.4 | No fix stated |
| Oracle Solaris | 11.3 | No fix stated |
References
- Oracle Advisory www.oracle.com
Timeline
- Published
- Last modified
Other CVEs of Oracle Solaris
The 44 CVEs of Oracle Solaris →
CVE-2026-91537
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
7.8
High
CVE-2026-91336
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility)
6.5
Medium
CVE-2026-91324
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries)
4.7
Medium
CVE-2026-91256
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services)
7.1
High