CVE-2026-91537 is a vulnerability in Oracle Solaris 11.4 that allows a low privileged attacker with logon access to the infrastructure to compromise the system. The vulnerability affects confidentiality, integrity, and availability, with a CVSS 3.1 base score of 7.8. Successful exploitation can lead to a full takeover of Oracle Solaris. Oracle has published a Critical Patch Update advisory addressing this and other vulnerabilities, recommending prompt application of patches.
CVE-2026-91348 is a high-severity vulnerability in Oracle Solaris Utility component affecting versions 11.3 and 11.4. It allows an unauthenticated attacker with logon access to the infrastructure to fully compromise the Oracle Solaris system, resulting in complete takeover. The vulnerability has a CVSS 3.1 base score of 8.4, indicating high impact on confidentiality, integrity, and availability. Oracle has released a Critical Patch Update in October 2026 addressing this and many other vulnerabilities.
CVE-2026-91336 is a vulnerability in Oracle Solaris 11.4 that allows a low privileged attacker with logon access to compromise the system. The flaw affects the Utility component and can lead to unauthorized creation, deletion, or modification of critical or accessible data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with significant integrity impact. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous patches across multiple products.
CVE-2026-91324 is a vulnerability in Oracle Solaris 11.4 Libraries that allows an unauthenticated attacker with logon access to cause a denial of service (hang or repeated crash) through a difficult-to-exploit flaw requiring user interaction. The impact is limited to availability with no confidentiality or integrity loss. The vulnerability has a CVSS 3.1 base score of 4.7 (medium severity).
CVE-2026-91255 is a vulnerability in Oracle Solaris 11.4 kernel that allows an unauthenticated attacker with network access via HTTP to cause a denial of service (DoS) by hanging or crashing the system. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity due to its impact on availability. No confidentiality or integrity impacts are reported. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous security patches across Oracle products.
CVE-2026-91254 is a vulnerability in the Oracle Solaris 11.4 kernel component that allows an unauthenticated attacker with network access via HTTP to cause a denial of service by hanging or crashing the system. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity due to its impact on availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous patches for multiple products including Oracle Solaris.
CVE-2026-91253 is a vulnerability in Oracle Solaris 11.4 kernel that allows a low privileged attacker with logon access to compromise the system. The flaw is easily exploitable and can lead to complete takeover of the Oracle Solaris environment. The vulnerability has a high CVSS score of 7.8, indicating significant confidentiality, integrity, and availability impacts. Oracle has published a Critical Patch Update in October 2026 addressing this and many other vulnerabilities.
CVE-2026-91252 is a vulnerability in Oracle Solaris 11.4 that allows an unauthenticated attacker with network access via HTTP to cause a denial of service (system hang or crash) and gain unauthorized read access to some data. The vulnerability has a high severity with a CVSS 3.1 base score of 8.2, impacting confidentiality and availability. Oracle has published a Critical Patch Update advisory that includes patches for this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly to mitigate this risk.
CVE-2026-91249 is a vulnerability in Oracle Solaris 11.4 affecting the Libraries component. It allows a low privileged attacker with logon access to the infrastructure running Oracle Solaris to gain unauthorized read access to some accessible data. The vulnerability has a low severity with a CVSS 3.1 base score of 3.3, impacting confidentiality only. Oracle has published a Critical Patch Update advisory that includes patches for multiple vulnerabilities, including this one.
CVE-2026-91244 is a vulnerability in Oracle Solaris 11.4 that allows a low privileged attacker with logon access to cause a denial of service (DoS) by triggering a hang or frequent crash of the system. The vulnerability is difficult to exploit and does not allow unauthorized disclosure or modification of data. The impact is limited to availability.
CVE-2026-91242 is a vulnerability in Oracle Solaris 11.4 affecting the Plugins component. It allows a high privileged attacker with logon access to the infrastructure to compromise Oracle Solaris. Exploitation requires human interaction from a user other than the attacker and can lead to unauthorized creation, deletion, or modification of critical data. The vulnerability impacts confidentiality and integrity but not availability. The CVSS 3.1 base score is 7.4, indicating high severity.
CVE-2026-91208 is a vulnerability in Oracle Solaris 11.4 Services component that allows an unauthenticated attacker with logon access to cause a denial of service (DoS) by hanging or crashing the system. The vulnerability is difficult to exploit and impacts availability without affecting confidentiality or integrity. The CVSS 3.1 base score is 5.1, indicating a medium severity level.
Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data as well as unauthorized read access to a subset of Oracle Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris. CVSS 3.1 Base Score 4.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L).
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data. CVSS 3.1 Base Score 2.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Solaris accessible data as well as unauthorized update, insert or delete access to some of Oracle Solaris accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N).
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data. CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
CVE-2026-60662 is a vulnerability in Oracle Solaris 11.4 that allows a low privileged attacker with logon access to the system to compromise the operating system. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 7.8. Successful exploitation can lead to full takeover of the Oracle Solaris system. Oracle has released a Critical Patch Update advisory addressing this and many other vulnerabilities, recommending prompt patch application.
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).