Low Privilege Exploitation Risk in Oracle Solaris by Oracle Systems
CVE-2026-60662

7.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
20 October 2026

What is CVE-2026-60662?

A security vulnerability in Oracle Solaris, part of the Oracle Systems suite, allows attackers with low privilege access to potentially gain control of the system. Specifically, the risk exists for users who are logged into the infrastructure where Oracle Solaris operates. If exploited, this vulnerability may lead to a complete takeover of Oracle Solaris, compromising the confidentiality, integrity, and availability of the system. The affected version is 11.4, making it crucial for users to apply security patches promptly to mitigate this risk.

Affected Version(s)

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.