CVE-2026-87422: Low severity Oracle Solaris vulnerability
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data. CVSS 3.1 Base Score 2.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running the supported affected Oracle Solaris 11.4 version are exposed. Exploitation requires access to the infrastructure where Oracle Solaris is running, so it is not described as remotely exploitable over a network.
What must an attacker do to exploit it?
The attacker does not need prior privileges, but must have logon access to the relevant infrastructure. Exploitation is difficult and also requires interaction by someone other than the attacker.
What is the potential impact of a successful attack?
A successful attack can allow unauthorized update, insert, or delete operations on some data accessible to Oracle Solaris. The stated impact is limited to integrity; no confidentiality or availability impact is listed.