8.8
High
CVE-2026-91527 Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core)
Description
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in takeover of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle ZFS Storage Appliance Kit | 8.8 | No fix stated |
Other CVEs of Oracle ZFS Storage Appliance Kit
The 12 CVEs of Oracle ZFS Storage Appliance Kit →
CVE-2026-101597
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core)
5.3
Medium
CVE-2026-21930
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Filesystems)
2.3
Low
CVE-2025-62480
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Naming Subsystem)
2.7
Low
CVE-2025-62479
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage)
2.7
Low