Library Vulnerability in Oracle Solaris by Oracle
CVE-2026-91249

3.3LOW

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91249?

A vulnerability has been identified in the Libraries component of the Oracle Solaris product, specifically affecting version 11.4. This issue enables low-privileged attackers, who have logged onto the infrastructure where Oracle Solaris operates, to compromise the system. If successfully exploited, it can lead to unauthorized read access to certain data within Oracle Solaris. This highlights a crucial security concern, necessitating prompt attention and remediation to protect sensitive information from potential exposure.

Affected Version(s)

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.