CVE-2026-91324: Medium severity Oracle Solaris vulnerability
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 4.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems running the supported affected Oracle Solaris 11.4 release are exposed. Exploitation is local: the attacker needs access to the infrastructure where Oracle Solaris is running rather than network-only reachability.
What does an attacker need to exploit it?
The attacker does not need prior privileges, but exploitation is difficult and requires human interaction by someone other than the attacker. The available data does not identify the specific interaction required.
What is the likely impact of a successful attack?
A successful attack can cause Oracle Solaris to hang or crash repeatedly, resulting in a complete denial of service. The stated CVSS impacts do not include confidentiality or integrity impact.