CVE-2026-34281: Medium severity Oracle Oracle Solaris vulnerability

Published Apr 21, 2026

Updated

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H).

Affected Software

2 affected components

Oracle Oracle Solaris=11.4

Oracle Solaris=11.4

Event History

Apr 21, 2026

CVE Published

via MITRE·08:35 PM

Data Sourced

via MITRE·08:35 PM

DescriptionSeverity

Data Sourced

via NVD·09:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-34281?

CVE-2026-34281 has a medium severity score of 6.5.

How do I fix CVE-2026-34281?

To fix CVE-2026-34281, apply the latest security patches provided by Oracle for Oracle Solaris 11.4.

Who is affected by CVE-2026-34281?

CVE-2026-34281 affects users of Oracle Solaris 11.4 running in environments accessible to low privileged attackers.

What type of vulnerability is CVE-2026-34281?

CVE-2026-34281 is an easily exploitable vulnerability in the Kernel component of Oracle Solaris.

What impact does CVE-2026-34281 have on systems?

CVE-2026-34281 allows attackers to compromise Oracle Solaris, potentially leading to denial of service due to high impact on availability.