---
id: "CVE-2026-87411"
kind: "vulnerability"
aliases: ["CVE-2026-87411"]
title: "Oracle Solaris 11.4: local user can crash the Filesystems component"
severity: "medium"
cvss: 5.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "on-prem", "oracle", "shared-hosts", "solaris"]
not_affected_if: ["no-local-logins", "other-os"]
published_at: "2026-10-20T22:20:19+00:00"
first_seen_at: "2026-10-23T21:57:25+00:00"
updated_at: "2026-10-25T04:12:11+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87411", "first_seen_at": "2026-10-23T21:57:25+00:00"}]
---

# Oracle Solaris 11.4: local user can crash the Filesystems component

A local user with low privileges on a Solaris 11.4 system can trigger a hang or repeatable crash of the Filesystems component. The impact is denial of service only; the CVSS vector shows no confidentiality or integrity loss.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `uname -v` and `pkg info entire` to confirm the Solaris 11.4 release and patch level
- Check whether the host is listed in Oracle's July 2026 Critical Patch Update advisory for Solaris (unknown if the sources give the exact patch IDs)

## Fix

- Apply the Oracle Solaris 11.4 Critical Patch Update that addresses CVE-2026-87411 (exact patch version: unknown)
- Update with `pkg update` once the fixed SRU is available (version: unknown)

## Timeline

- 2026-10-23T21:57:25+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-87411

## From the sources

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems).   The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_