CVE-2026-46978: Critical severity Oracle Oracle Solaris vulnerability

Published Jun 16, 2026

Updated

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Solaris accessible data as well as unauthorized access to critical data or complete access to all Oracle Solaris accessible data. CVSS 3.1 Base Score 10.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).

Affected Software

2 affected components

Oracle Oracle Solaris=11.4

Oracle Solaris=11.4

Event History

Jun 16, 2026

CVE Published

via MITRE·07:28 PM

Data Sourced

via MITRE·07:28 PM

DescriptionSeverity

Jun 17, 2026

Data Sourced

via NVD·10:54 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-46978?

The severity of CVE-2026-46978 is critical, rated at 10 on the CVSS scale.

How can I fix CVE-2026-46978?

To fix CVE-2026-46978, users should apply the latest security patch provided by Oracle for Oracle Solaris 11.4.

What type of vulnerability is CVE-2026-46978?

CVE-2026-46978 is a remote code execution vulnerability in the Remote Administration Daemon of Oracle Solaris.

Who is affected by CVE-2026-46978?

CVE-2026-46978 affects all users running Oracle Solaris version 11.4.

Can an unauthenticated attacker exploit CVE-2026-46978?

Yes, CVE-2026-46978 can be easily exploited by an unauthenticated attacker with network access via HTTPS.