Utility Vulnerability in Oracle Solaris Affects Critical Data Access
CVE-2026-91336

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Solaris
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91336?

A vulnerability in the Oracle Solaris Utility component poses significant risks, allowing low-privileged attackers who have access to the infrastructure where Oracle Solaris operates to compromise the system. This can lead to unauthorized creation, deletion, or modification of critical data, affecting all data accessible within Oracle Solaris. Organizations utilizing this system should be aware that while the vulnerability resides in Oracle Solaris, its implications can extend to additional products, thus amplifying the potential impact of an attack.

Affected Version(s)

Oracle Solaris 11.4

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.