CVE-2026-61052: Medium severity Oracle Solaris vulnerability

Published Jul 21, 2026

Updated

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Affected Software

2 affected components

Oracle Solaris=11.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Oracle Solaris Filesystems to a version that resolves this vulnerability.
Fixed in 11.4

Event History

Jul 21, 2026

CVE Published

via MITRE·09:37 PM

Data Sourced

via MITRE·09:37 PM

DescriptionSeverity

Data Sourced

via NVD·10:18 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-61052?

The severity of CVE-2026-61052 is rated as medium with a score of 5.5.

How do I fix CVE-2026-61052?

To fix CVE-2026-61052, apply the latest patch or update provided by Oracle for Oracle Solaris 11.4.

What component is affected by CVE-2026-61052?

CVE-2026-61052 affects the Filesystems component of the Oracle Solaris product.

Who can exploit CVE-2026-61052?

CVE-2026-61052 can be exploited by a low privileged attacker who has logon access to the infrastructure running Oracle Solaris.

What is the impact of CVE-2026-61052?

The impact of CVE-2026-61052 is a potential compromise of the Oracle Solaris system, leading to high availability threats.