CVE-2026-87414: Low severity Oracle Oracle Solaris vulnerability
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data. CVSS 3.1 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running the supported affected Oracle Solaris 11.4 version are exposed through the Image Packaging System component. Exploitation requires network access via TLS.
What does an attacker need to exploit it?
The attacker does not need prior authentication, but exploitation is difficult and requires human interaction by someone other than the attacker. The available data does not specify the exact user action required.
What is the potential impact of a successful attack?
A successful attack can allow unauthorized update, insert, or delete operations on some Oracle Solaris-accessible data. The stated impact is limited to integrity; no confidentiality or availability impact is identified.