Vulnerability in Oracle Solaris Product by Oracle Systems
CVE-2026-91242

7.4HIGH

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91242?

This vulnerability in Oracle Solaris enables a high privileged attacker, already logged onto the Oracle infrastructure, to exploit the system. Exploitation requires additional human interaction, putting users at risk. While the flaw resides in Oracle Solaris, it may have broader implications, affecting other linked products. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data. It potentially grants attackers unauthorized access to sensitive information accessible within Oracle Solaris.

Affected Version(s)

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.