Vulnerability in Oracle Solaris Image Packaging System
CVE-2026-87421

7.1HIGH

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
20 October 2026

What is CVE-2026-87421?

Oracle Solaris is impacted by a vulnerability in its Image Packaging System that allows unauthenticated attackers with network access via HTTP to exploit the system. This vulnerability requires human interaction from an individual other than the attacker. Successful exploitation can lead to unauthorized access to sensitive data and provide complete control over all accessible data in Oracle Solaris. An attacker could potentially carry out unauthorized updates, inserts, or deletions on various data accessible within the system.

Affected Version(s)

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.