Unauthenticated Vulnerability in Oracle Solaris Libraries
CVE-2026-91324

4.7MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91324?

This vulnerability in Oracle Solaris libraries allows an unauthenticated attacker with access to the execution environment to compromise the system. To successfully exploit this vulnerability, human interaction is required from an individual who is not the attacker. Attackers can cause significant disruption by instigating a Denial of Service, manifesting as repeated crashes or hangs of the Oracle Solaris system.

Affected Version(s)

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.