{"id":"CVE-2026-101537","kind":"vulnerability","aliases":["CVE-2026-101537"],"related":[],"title":"Oracle Solaris 11.4: unauthenticated network flaw in Utility gives full takeover","description":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).   The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Solaris.  Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","summary":"Oracle Solaris 11.4 has a flaw in its Utility component that an unauthenticated attacker can reach over TCP and use to take over the host (CVSS 3.1 9.8). Fixed in Oracle's October 2026 Critical Patch Update. No exploitation or public PoC found as of Oct 23, 2026.","severity":"critical","cvss":9.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Oracle Solaris","fixed":["11.4 SRU96 (96.227.1)"],"affected":"11.4 (before SRU96)","ecosystem":"vendor"}],"ecosystems":[],"tags":["infrastructure","oracle-solaris-11.4","self-hosted","solaris"],"not_affected_if":["not-solaris-11.4"],"how_to_check":"Run 'pkg info entire' on each Solaris 11.4 host and compare the SRU with 11.4 SRU96 (96.227.1). Anything older than SRU96 is likely exposed. Oracle's CVE-to-SRU mapping is in the Solaris risk matrix on the CPU page and My Oracle Support.","fix":"Run 'pkg update' from the Oracle support repository to Oracle Solaris 11.4 SRU96 CPU (96.227.1; MOS Doc ID KB631614). Until patched, restrict inbound TCP to the host with firewall rules. Confirm with Oracle's risk matrix that SRU96 covers this CVE.","status":"open","published_at":"2026-10-20T22:18:03+00:00","first_seen_at":"2026-10-23T21:57:22+00:00","triaged_at":"2026-10-23T22:38:52+00:00","updated_at":"2026-10-23T23:08:29+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T22:38:52Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Oracle Solaris 11.4: unauthenticated network flaw in Utility gives full takeover","impact":"high","summary":"Oracle Solaris 11.4 has a flaw in its Utility component that a remote attacker can reach over TCP without logging in. Successful exploitation lets the attacker take over the host, per the NVD entry (CVSS 9.8).","category":"infrastructure","who_cares":["solaris","oracle-solaris-11.4","self-hosted"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker takes over the Solaris host remotely without credentials.","analyst_note":"Find the Oracle Critical Patch Update advisory for this CVE and the affected Utility service and patch; check https://nvd.nist.gov/vuln/detail/CVE-2026-101537 and Oracle's CPU page for the fixed build.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["not-solaris-11.4"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000502,"input_tokens":3045,"output_tokens":395,"severity_before":"critical"},"analyst_status":"done","analyst_note":"Find the Oracle Critical Patch Update advisory for this CVE and the affected Utility service and patch; check https://nvd.nist.gov/vuln/detail/CVE-2026-101537 and Oracle's CPU page for the fixed build.","search":"'-101537':14A,17A '-2026':13A,16A '/av':137C '11.4':3A,24B,31B,95C '2026':62B,76B '23':75B '3.1':55B,124C,136C '9.8':56B,127C 'access':104C 'affect':93C 'allow':99C 'attack':42B,101C,112C 'avail':131C 'base':125C 'compon':38B,86C 'compromis':108C 'confidenti':128C 'critic':63B 'cve':12A,15A 'cvss':54B,123C,133C,135C 'easili':96C 'exploit':67B,97C 'fix':57B 'flaw':6A,34B 'found':71B 'full':10A 'give':9A 'h':145C 'h/a':144C 'h/i':143C 'host':27B,53B 'impact':132C 'infrastructur':20B 'integr':129C 'l/pr':139C 'n/ac':138C 'n/s':141C 'n/ui':140C 'network':5A,103C 'oct':74B 'octob':61B 'oracl':1A,22B,29B,59B,80C,84C,109C,121C 'oracle':18A 'oracle-solari':21B 'patch':64B 'poc':70B 'product':82C 'public':69B 'reach':44B 'result':117C 'score':126C 'self':26B 'self-host':25B 'solari':2A,23B,28B,30B,81C,110C,122C 'solaris':19A 'success':111C 'support':89C 'system':85C 'take':50B 'takeov':11A,119C 'tcp':46B,106C 'u/c':142C 'unauthent':4A,41B,100C 'updat':65B 'use':48B 'util':8A,37B,87C 'vector':134C 'version':90C 'via':105C 'vulner':77C,98C,115C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:18:03+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-101537","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-101537","severity":null,"published_at":"2026-10-20T22:18:03+00:00","modified_at":"2026-10-21T18:44:55+00:00","first_seen_at":"2026-10-23T21:57:22+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-101537:374","url":null,"severity":null,"published_at":"2026-10-23T23:08:29+00:00","modified_at":"2026-10-23T23:08:29+00:00","first_seen_at":"2026-10-23T23:08:29+00:00","fetched_at":"2026-10-23T23:08:29+00:00","note":"Oracle CPU Oct 2026 (Oct 20) lists Solaris 11.3/11.4; CVE record says 11.4, Utility component, CVSS 9.8, no KEV, no exploitation or PoC found. Oracle's SRU96 CPU blog is the fix vehicle but does not name this CVE; I could not read the Solaris risk matrix (page truncated), so the fixed build is inferred, not confirmed. No social search done."}],"documents":[{"id":1637,"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","title":"Oracle Critical Patch Update Advisory - October 2026","kind":"advisory","source":"analyst","text":"Lists Oracle E-Business Suite, versions 12.2.3-12.2.15 as affected; patches via Patch Availability Document (MOS). Released 2026-10-20.","published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":1770,"url":"https://blogs.oracle.com/solaris/announcing-oracle-solaris-11-4-sru96-cpu","title":"Announcing Oracle Solaris 11.4 SRU96 CPU","kind":"release","source":"analyst","text":null,"published_at":null,"relation":"fix","confidence":null,"note":null},{"id":1804,"url":"https://cve.armis.com/CVE-2026-101537","title":"Armis: CVE-2026-101537","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null},{"id":1805,"url":"https://www.cve.org/CVERecord?id=CVE-2026-101537","title":"CVE Record: CVE-2026-101537","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}