{"id":"CVE-2026-87413","kind":"vulnerability","aliases":["CVE-2026-87413"],"related":[],"title":"Oracle Solaris 11.4: local user can crash the filesystem stack","description":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems).   The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).","summary":"A low-privileged local user on an Oracle Solaris 11.4 system can trigger a hang or repeatable crash in the Filesystems component. The impact is denial of service only, with no confidentiality or integrity loss.","severity":"medium","cvss":5.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","multi-user-hosts","on-prem","solaris"],"not_affected_if":["no-local-logins","single-user-host"],"how_to_check":"- Run `uname -v` on the Solaris host and compare against Oracle's patch list for 11.4\n- unknown","fix":"- Apply the Oracle Solaris 11.4 Filesystems fix from the Oracle Critical Patch Update for the quarter listed in the advisory\n- unknown","status":"open","published_at":"2026-10-20T22:20:19+00:00","first_seen_at":"2026-10-23T21:57:25+00:00","triaged_at":"2026-10-25T04:12:11+00:00","updated_at":"2026-10-25T04:12:11+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-25T04:12:11Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Oracle Solaris 11.4 Filesystems fix from the Oracle Critical Patch Update for the quarter listed in the advisory\n- unknown","reach":"local","title":"Oracle Solaris 11.4: local user can crash the filesystem stack","impact":"low","summary":"A low-privileged local user on an Oracle Solaris 11.4 system can trigger a hang or repeatable crash in the Filesystems component. The impact is denial of service only, with no confidentiality or integrity loss.","category":"infrastructure","nicknames":[],"who_cares":["solaris","on-prem","multi-user-hosts"],"confidence":0.7,"needs_auth":"yes","worst_case":"local user crashes or hangs the Solaris host repeatedly","analyst_note":"Check Oracle's Solaris 11.4 CPU advisory for the fixed SRU or patch ID and the exact affected build; sources give only the CVSS vector.","how_to_check":"- Run `uname -v` on the Solaris host and compare against Oracle's patch list for 11.4\n- unknown","needs_analyst":true,"not_affected_if":["single-user-host","no-local-logins"],"who_is_affected":"Systems running Oracle Solaris 11.4 where untrusted or low-privileged users can log in locally. Any multi-user Solaris host with shell access for many accounts is the most exposed; single-user or fully locked-down hosts carry less risk. The sources do not say which Solaris patch level is fixed.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000625,"input_tokens":3456,"output_tokens":559,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-87413':13A,16A '/av':135C '11.4':3A,36B,80C '3.1':125C,134C '5.5':128C 'abil':110C 'affect':78C 'allow':84C 'attack':87C,102C 'avail':129C 'base':126C 'caus':112C 'complet':119C 'compon':48B,71C 'compromis':98C 'confidenti':58B 'crash':7A,44B,118C 'cve':11A,14A 'cvss':124C,131C,133C 'denial':52B 'dos':120C 'easili':81C 'execut':96C 'exploit':82C 'filesystem':9A,47B,72C 'frequent':116C 'h':143C 'hang':41B,114C 'host':21B 'impact':50B,130C 'infrastructur':17B,92C 'integr':60B 'l/ac':136C 'l/pr':137C 'l/ui':138C 'local':4A,30B 'logon':89C 'loss':61B 'low':28B,85C 'low-privileg':27B 'multi':19B 'multi-user-host':18B 'n/a':142C 'n/i':141C 'n/s':139C 'on-prem':22B 'oracl':1A,34B,65C,69C,94C,99C,122C 'prem':24B 'privileg':29B,86C 'product':67C 'repeat':43B,117C 'result':107C 'score':127C 'servic':54B 'solari':2A,25B,35B,66C,95C,100C,123C 'stack':10A 'success':101C 'support':74C 'system':37B,70C 'trigger':39B 'u/c':140C 'unauthor':109C 'user':5A,20B,31B 'vector':132C 'version':75C 'vulner':62C,83C,105C","nicknames":[],"mitigations":[],"who_affected":"Systems running Oracle Solaris 11.4 where untrusted or low-privileged users can log in locally. Any multi-user Solaris host with shell access for many accounts is the most exposed; single-user or fully locked-down hosts carry less risk. The sources do not say which Solaris patch level is fixed.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:20:19+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-87413","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87413","severity":null,"published_at":"2026-10-20T22:20:19+00:00","modified_at":"2026-10-21T18:45:11+00:00","first_seen_at":"2026-10-23T21:57:25+00:00","fetched_at":"2026-10-23T22:29:00+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}