Vulnerability in Oracle Solaris 11.4 Filesystems by Oracle Systems
CVE-2026-60659

7.1HIGH

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60659?

A security vulnerability exists in the Oracle Solaris Filesystems component, specifically affecting version 11.4. This vulnerability allows an attacker with low privileges and access to the infrastructure where Oracle Solaris operates to exploit certain weaknesses. The exploitation could lead to unauthorized actions such as creating, deleting, or modifying critical data accessible by Oracle Solaris. Additionally, it can permit an attacker to induce a denial of service (DOS) condition, resulting in system instability or crashes. Organizations using Oracle Solaris are encouraged to review their security measures and apply necessary patches as per Oracle's advisory.

Affected Version(s)

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.