CVE-2026-21942: Medium severity Oracle Solaris vulnerability
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-21942?
CVE-2026-21942 is considered easily exploitable by low privileged attackers who have logon access to the Oracle Solaris environment.
How do I fix CVE-2026-21942?
To fix CVE-2026-21942, apply the latest security patches provided by Oracle for affected Oracle Solaris versions.
Which versions of Oracle Solaris are affected by CVE-2026-21942?
CVE-2026-21942 affects Oracle Solaris versions 10 and 11.
Who is impacted by CVE-2026-21942?
Low privileged attackers with logon access to the Oracle Solaris environment are impacted by CVE-2026-21942.
What component does CVE-2026-21942 affect?
CVE-2026-21942 affects the Filesystems component of the Oracle Solaris product.