Vulnerability in Oracle Solaris 11.4 Allows Unauthorized Data Access
CVE-2026-60834

7.1HIGH

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60834?

A vulnerability exists in Oracle Solaris 11.4 that can be exploited by a low privileged attacker with network access through RAD. While the primary impact is on Oracle Solaris, the scope of potential attacks may extend to other connected products, making the risk even more significant. Successful exploitation can lead to unauthorized access to sensitive data, including the ability to update, insert, or delete data within the system. Organizations using Oracle Solaris should be aware of this vulnerability and consider taking immediate steps to mitigate the risks associated.

Affected Version(s)

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.