Oracle Solaris vulnerabilities

22 known vulnerabilities in Oracle Solaris from Oracle. 22 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

22vulnerabilities

3critical

19high

0exploited

7.9average CVSS score

Latest first

7.8 High severity
Oracle Solaris: Improper Privilege Management
CVE-2026-91537Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes t
8.4 High severity
Oracle Solaris: Improper Privilege Management
CVE-2026-91348Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris e
7.1 High severity
Oracle Solaris: Uncontrolled Resource Consumption
CVE-2026-91256Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Solaris. Succ
7.5 High severity
Oracle Solaris: Uncontrolled Resource Consumption
CVE-2026-91255Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Succe
7.5 High severity
Oracle Solaris: Uncontrolled Resource Consumption
CVE-2026-91254Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Succe
7.8 High severity
Oracle Solaris: Improper Privilege Management
CVE-2026-91253Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to
8.2 High severity
Oracle Solaris: Uncontrolled Resource Consumption
CVE-2026-91252Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Suc
7.4 High severity
Oracle Solaris: Improper Access Control
CVE-2026-91242Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins). The supported version that is affected is 11.4. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes
7.1 High severity
Oracle Solaris: Improper Authorization
CVE-2026-87421Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl
7.5 High severity
Oracle Solaris: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-87417Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl
7.8 High severity
Oracle Solaris: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-60662Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes
9.8 Critical severity
Oracle Solaris: Improper Authentication
CVE-2026-60432Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
8.8 High severity
Oracle Solaris: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-47025Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Solari
9.8 Critical severity
Oracle Solaris: Improper Authentication
CVE-2026-101537Oct 20, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Solaris. Succe
7.5 High severity
Oracle Solaris: Improper Access Control
CVE-2026-61202Jul 21, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris
7.1 High severity
Oracle Solaris: Improper Access Control
CVE-2026-60834Jul 21, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with network access via RAD to compromise Oracle Solaris. Whil
7.0 High severity
Oracle Solaris: Improper Privilege Management
CVE-2026-60833Jul 21, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes
7.8 High severity
Oracle Solaris: Improper Privilege Management
CVE-2026-60661Jul 21, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris exec
7.1 High severity
Oracle Solaris: Improper Access Control
CVE-2026-60659Jul 21, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris execut
10.0 Critical severity
Oracle Solaris: Improper Access Control
CVE-2026-46978Jun 17, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromis
7.1 High severity
Oracle Solaris: Improper Privilege Management
CVE-2026-46914Jun 17, 2026Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris execute
7.2 High severity
Oracle Solaris: Improper Access Control
CVE-2025-30690Apr 15, 2025Oracle
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris execut