Utility Vulnerability in Oracle Solaris 11.3 and 11.4 by Oracle Systems
CVE-2026-47025

8.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
20 October 2026

What is CVE-2026-47025?

An exploitable vulnerability exists within the Oracle Solaris product, specifically in its utility component. This flaw affects Oracle Solaris versions 11.3 and 11.4, enabling an attacker with low privileges and network access through HTTP to compromise system security. If successfully exploited, this vulnerability could lead to a total takeover of the affected Oracle Solaris instance, thereby compromising confidentiality, integrity, and availability of the system. Organizations using the affected versions should consider implementing protective measures to mitigate the risks associated with this security issue.

Affected Version(s)

Oracle Solaris 11.3

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.