Exploitability in Oracle Solaris Kernel Discovered by Oracle
CVE-2026-21928

5.3MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
20 January 2026

What is CVE-2026-21928?

A vulnerability within the Oracle Solaris Kernel allows unauthenticated attackers with network access to potentially compromise the system. This vulnerability could enable unauthorized read access to certain data stored on Oracle Solaris, making it essential for users to implement necessary security measures and patches to mitigate risks associated with network attacks.

Affected Version(s)

Oracle Solaris 11

References

https://www.oracle.com/security-alerts/cpujan2026.html
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.