Live › vulnerability › CVE-2026-47025
Go to dashboardOracle Solaris 11.3 and 11.4 contain a flaw in the Utility component that an attacker can reach over HTTP with a low-privilege account. Successful exploitation lets the attacker take over the system, per the CVSS 8.8 vector with full confidentiality, integrity and availability impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Oracle Solaris | vendor | 11.3, 11.4 | – |
pkg info entire on each Solaris host; 11.3 and 11.4 are both affectedEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-47025")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.