This vulnerability in Oracle Solaris Utility component affects versions 11.3 and 11.4. It is difficult to exploit but allows a low privileged attacker with logon access to compromise Oracle Solaris, resulting in unauthorized creation, deletion, or modification of critical data. The vulnerability impacts confidentiality and integrity with a CVSS 3.1 score of 7.5 (AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N). The scope change indicates potential impact on other Oracle products. Oracle's July 2026 Critical Patch Update advisory references this vulnerability but does not explicitly confirm patch availability or remediation level for Oracle Solaris. Oracle strongly recommends applying security patches without delay to mitigate risks.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or all data accessible by Oracle Solaris, resulting in high confidentiality and integrity impact. The vulnerability does not affect availability. The scope change suggests that other Oracle products may also be impacted by attacks exploiting this vulnerability.

Oracle's advisory does not explicitly confirm a patch or remediation level for this vulnerability at this time. Customers should monitor the Oracle Critical Patch Update advisory and apply patches promptly when available. Oracle strongly recommends remaining on actively supported versions and applying security updates without delay to mitigate exploitation risks.