{"id":"CVE-2026-47025","kind":"vulnerability","aliases":["CVE-2026-47025"],"related":[],"title":"Oracle Solaris Utility flaw lets a low-privilege network user take over","description":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).  Supported versions that are affected are 11.3 and  11.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Solaris.  Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).","summary":"Oracle Solaris 11.3 and 11.4 contain a flaw in the Utility component that an attacker can reach over HTTP with a low-privilege account. Successful exploitation lets the attacker take over the system, per the CVSS 8.8 vector with full confidentiality, integrity and availability impact.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Oracle Solaris","fixed":[],"affected":"11.3, 11.4","ecosystem":"vendor"}],"ecosystems":[],"tags":["infrastructure","oracle-solaris","self-hosted","solaris"],"not_affected_if":["managed-hosting","unknown"],"how_to_check":"Run 'pkg info entire' on each Solaris host; 11.3 and 11.4 are both affected. Then check whether the Utility component is reachable over HTTP to low-privilege accounts. Compare against the Solaris entry in Oracle's Oct 2026 CPU patch availability document (My Oracle Support login needed).","fix":"Apply the Oct 2026 CPU Solaris SRU/patch from the Systems patch availability document on My Oracle Support. The exact fixed package version is not published on the public advisory: unknown. Restrict HTTP access to the host until patched.","status":"open","published_at":"2026-10-20T22:19:31+00:00","first_seen_at":"2026-10-23T21:57:25+00:00","triaged_at":"2026-10-23T22:34:48+00:00","updated_at":"2026-10-24T00:04:02+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-23T22:34:48Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Oracle Solaris security patch for CVE-2026-47025 from Oracle's Critical Patch Update advisory; the fixed package version is unknown from the sources.","reach":"network","title":"Oracle Solaris Utility flaw lets a low-privilege network user take over","impact":"high","summary":"Oracle Solaris 11.3 and 11.4 contain a flaw in the Utility component that an attacker can reach over HTTP with a low-privilege account. Successful exploitation lets the attacker take over the system, per the CVSS 8.8 vector with full confidentiality, integrity and availability impact.","category":"infrastructure","who_cares":["solaris","oracle-solaris","self-hosted"],"confidence":0.6,"needs_auth":"yes","worst_case":"Attacker takes over the Solaris system with full read, write and disruption rights","analyst_note":"Find the Oracle advisory and fixed patch IDs for Solaris 11.3 and 11.4 and any HTTP service or setting that exposes the Utility component; the sources give only the NVD summary.","how_to_check":"Run 'pkg info entire' on the Solaris host to see the installed release version and compare it against Oracle's patch advisory for CVE-2026-47025.","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000551,"input_tokens":3046,"output_tokens":493,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find Oracle's Critical Patch Update advisory for CVE-2026-47025 to get patched Solaris versions and which HTTP-facing Utility component is affected.","search":"'-2026':14A,17A '-47025':15A,18A '/av':137C '11.3':31B,92C '11.4':33B,94C '3.1':124C,136C '8.8':66B,127C 'access':104C 'account':53B 'affect':90C 'allow':98C 'attack':43B,58B,101C,112C 'avail':73B,131C 'base':125C 'compon':40B,84C 'compromis':108C 'confidenti':70B,128C 'contain':34B 'cve':13A,16A 'cvss':65B,123C,133C,135C 'easili':95C 'exploit':55B,96C 'flaw':4A,36B 'full':69B 'h':145C 'h/a':144C 'h/i':143C 'host':27B 'http':47B,106C 'impact':74B,132C 'infrastructur':21B 'integr':71B,129C 'l/pr':139C 'l/ui':140C 'let':5A,56B 'low':8A,51B,99C 'low-privileg':7A,50B 'n/ac':138C 'n/s':141C 'network':10A,103C 'oracl':1A,23B,29B,78C,82C,109C,121C 'oracle':19A 'oracle-solari':22B 'per':63B 'privileg':9A,52B,100C 'product':80C 'reach':45B 'result':117C 'score':126C 'self':26B 'self-host':25B 'solari':2A,24B,28B,30B,79C,110C,122C 'solaris':20A 'success':54B,111C 'support':86C 'system':62B,83C 'take':12A,59B 'takeov':119C 'u/c':142C 'user':11A 'util':3A,39B,85C 'vector':67B,134C 'version':87C 'via':105C 'vulner':75C,97C,115C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:19:31+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-47025","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47025","severity":null,"published_at":"2026-10-20T22:19:31+00:00","modified_at":"2026-10-21T18:44:19+00:00","first_seen_at":"2026-10-23T21:57:25+00:00","fetched_at":"2026-10-23T22:29:00+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-47025:578","url":null,"severity":null,"published_at":"2026-10-24T00:04:02+00:00","modified_at":"2026-10-24T00:04:02+00:00","first_seen_at":"2026-10-24T00:04:02+00:00","fetched_at":"2026-10-24T00:04:02+00:00","note":"Oracle CPU Oct 2026 (20 Oct) lists Solaris 11.3/11.4; CVE record gives Utility component, HTTP, low-priv, CVSS 8.8. Fixed package versions are behind MOS patch docs and not public; no exploitation or PoC reported (Armis, Rapid7 not KEV). No public discussion searched beyond that."}],"documents":[{"id":1637,"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","title":"Oracle Critical Patch Update Advisory - October 2026","kind":"advisory","source":"analyst","text":"Lists Oracle E-Business Suite, versions 12.2.3-12.2.15 as affected; patches via Patch Availability Document (MOS). Released 2026-10-20.","published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":2334,"url":"https://www.cve.org/CVERecord?id=CVE-2026-47025","title":"CVE Record: CVE-2026-47025","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}