CVE-2026-46914: High severity Oracle Oracle Solaris vulnerability
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Solaris accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict interactive logon access to Oracle Solaris 11.4 hosts: apply firewall/ACL rules to allow management/logon only from trusted IPs and management networks, and segment Solaris hosts from general user networks. Block or limit remote access paths (SSH, RDP, VPN endpoints) from untrusted sources.
- Compensating control
Harden account access for any accounts that can log on to Oracle Solaris 11.4 systems: enforce least privilege (remove unnecessary accounts and privileges), require multi-factor authentication where possible, and disable or remove unused remote-login services.
- Operational
If a compromise is suspected or confirmed, immediately isolate affected Solaris hosts from the network, perform forensic investigation, rebuild or restore systems from known-good backups, and rotate credentials and keys used on those systems.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46914?
The severity of CVE-2026-46914 is classified as high with a score of 7.1.
How do I fix CVE-2026-46914?
To fix CVE-2026-46914, apply the latest security patches provided by Oracle for Oracle Solaris 11.4.
What components are affected by CVE-2026-46914?
CVE-2026-46914 specifically affects the Filesystem component of the Oracle Solaris product.
Who is at risk from CVE-2026-46914?
Low privileged attackers with logon access to the infrastructure where Oracle Solaris executes are at risk from CVE-2026-46914.
Can CVE-2026-46914 lead to data compromise?
Yes, CVE-2026-46914 allows for the potential compromise of Oracle Solaris, resulting in the exposure of confidential data.