Denial of Service Vulnerability in Oracle Solaris 11.4 by Oracle
CVE-2026-91208

5.1MEDIUM

Key Information:

Vendor

Oracle

Vendor
CVE Published:
20 October 2026

What is CVE-2026-91208?

A vulnerability exists in the Oracle Solaris product affecting version 11.4, which can be exploited by an unauthenticated attacker who has access to the infrastructure where Oracle Solaris runs. This flaw allows the attacker to disrupt services by causing the system to hang or crash repeatedly, leading to significant downtime. Organizations using Oracle Solaris should take immediate action to apply the necessary patches and mitigate risks associated with unauthorized access and potential service disruptions.

Affected Version(s)

Oracle Solaris 11.4

References

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.