Denial of Service Vulnerability in Oracle Solaris 11.4 by Oracle Systems
CVE-2026-91244

4.7MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91244?

A vulnerability within the Oracle Solaris product of Oracle Systems affects the supported version 11.4. This flaw can be exploited by low privileged attackers who have logon access to the infrastructure running Oracle Solaris. If successfully executed, the attacks can lead to unauthorized actions that may cause the system to hang or crash repeatedly, resulting in significant denial of service. The implications of this vulnerability highlight the importance of patching and securing environments running Oracle Solaris.

Affected Version(s)

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.