Kernel Vulnerability in Oracle Solaris by Oracle Systems
CVE-2026-34281

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
21 April 2026

What is CVE-2026-34281?

A vulnerability in Oracle Solaris allows low privileged attackers with logon access to the infrastructure where Oracle Solaris operates to compromise the system. The easily exploitable flaw can lead to a Denial of Service, causing Oracle Solaris to hang or experience frequent crashes. This issue poses risks not only to the Solaris product itself but can also impact other systems operationally linked to Oracle Solaris.

Affected Version(s)

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpuapr2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.