CVE-2026-46914 is a vulnerability in the filesystem component of Oracle Solaris version 11.4. It is easily exploitable by an attacker with low privileges who has logon access to the system infrastructure. Exploitation can result in unauthorized access to critical or all data accessible by Oracle Solaris and can cause the system to hang or crash repeatedly, resulting in a complete denial of service. The vulnerability has a CVSS 3.1 base score of 7.1 with high confidentiality and availability impacts. Oracle's June 2026 Critical Security Patch Update advisory references this vulnerability among 245 security patches but does not explicitly confirm patch availability or remediation level for this specific issue. Oracle strongly recommends applying the Critical Security Patch Update promptly to mitigate the risk.

Successful exploitation of this vulnerability allows an attacker with low privileges and logon access to gain unauthorized access to critical or all data accessible by Oracle Solaris 11.4. Additionally, the attacker can cause the system to hang or crash frequently, resulting in a complete denial of service. The impact affects confidentiality and availability but does not affect integrity according to the CVSS vector.

Oracle strongly recommends applying the June 2026 Critical Security Patch Update as soon as possible to address this vulnerability. Until patches are applied, risk may be reduced by blocking network protocols required for exploitation and by removing unnecessary privileges or access to vulnerable packages from users who do not need them. These mitigations may impact application functionality, so they should be applied carefully. Patch status is not explicitly confirmed in the advisory; therefore, check the Oracle advisory at https://www.oracle.com/security-alerts/cspujun2026.html for the latest remediation guidance.