Unauthorized Data Manipulation Vulnerability in Oracle Solaris by Oracle Systems
CVE-2026-87422

2.5LOW

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
20 October 2026

What is CVE-2026-87422?

A vulnerability exists in Oracle Solaris that allows an unauthenticated attacker who has logged onto the infrastructure to compromise the system. This flaw requires human interaction from a user other than the attacker, enabling potential unauthorized updates, inserts, or deletions of data accessible within Oracle Solaris. The risk is increased by the inherent complexity of exploitation, requiring specific conditions to be met.

Affected Version(s)

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
2.5
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.