{"id":"CVE-2026-91208","kind":"vulnerability","aliases":["CVE-2026-91208"],"related":[],"title":"Oracle Solaris 11.4 Services flaw lets local users crash the host","description":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services).   The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).","summary":"A flaw in the Services component of Oracle Solaris 11.4 can be triggered by an attacker who already has a logon on the machine. Successful exploitation can cause a hang or a repeatable crash of the whole system.","severity":"medium","cvss":5.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","on-prem","oracle-solaris","servers","solaris"],"not_affected_if":["no-untrusted-local-logins"],"how_to_check":"- Run `uname -v` on the Solaris host to read the release build and compare it with Oracle's patch advisory for CVE-2026-91208\n- Run `pkg info entire` to see the installed Solaris 11.4 package version","fix":"- Apply the Oracle Solaris 11.4 security update that Oracle lists for CVE-2026-91208 (version unknown from the sources)","status":"open","published_at":"2026-10-20T22:20:21+00:00","first_seen_at":"2026-10-23T21:57:26+00:00","triaged_at":"2026-10-25T04:29:03+00:00","updated_at":"2026-10-25T04:29:03+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T04:29:03Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Oracle Solaris 11.4 security update that Oracle lists for CVE-2026-91208 (version unknown from the sources)","reach":"local","title":"Oracle Solaris 11.4 Services flaw lets local users crash the host","impact":"low","summary":"A flaw in the Services component of Oracle Solaris 11.4 can be triggered by an attacker who already has a logon on the machine. Successful exploitation can cause a hang or a repeatable crash of the whole system.","category":"infrastructure","nicknames":[],"who_cares":["solaris","oracle-solaris","on-prem","servers"],"confidence":0.6,"needs_auth":"yes","worst_case":"Local user causes repeatable system hang or crash","analyst_note":"Check Oracle's Solaris 11.4 CPU advisory for the fixed SRU or package version and any Services-specific configuration that changes exposure.","how_to_check":"- Run `uname -v` on the Solaris host to read the release build and compare it with Oracle's patch advisory for CVE-2026-91208\n- Run `pkg info entire` to see the installed Solaris 11.4 package version","needs_analyst":true,"not_affected_if":["no-untrusted-local-logins"],"who_is_affected":"Systems running Oracle Solaris 11.4 where untrusted users can log on to the host. The sources do not describe a network-only path, so exposure depends on who holds local accounts. Hosts with only trusted administrators and no shell access for others have a lower risk.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000626,"input_tokens":3453,"output_tokens":562,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-91208':14A,17A '/av':138C '11.4':3A,36B,83C '3.1':128C,137C '5.1':131C 'abil':113C 'affect':81C 'allow':88C 'alreadi':44B 'attack':42B,90C,105C 'avail':132C 'base':129C 'caus':54B,115C 'complet':122C 'compon':32B,74C 'compromis':101C 'crash':9A,60B,121C 'cve':12A,15A 'cvss':127C,134C,136C 'difficult':84C 'dos':123C 'execut':99C 'exploit':52B,86C 'flaw':5A,28B 'frequent':119C 'h':146C 'h/pr':140C 'hang':56B,117C 'host':11A 'impact':133C 'infrastructur':18B,95C 'l/ac':139C 'let':6A 'local':7A 'logon':47B,92C 'machin':50B 'n/a':145C 'n/i':144C 'n/s':142C 'n/ui':141C 'on-prem':19B 'oracl':1A,23B,34B,68C,72C,97C,102C,125C 'oracle-solari':22B 'prem':21B 'product':70C 'repeat':59B,120C 'result':110C 'score':130C 'server':25B 'servic':4A,31B,75C 'solari':2A,24B,26B,35B,69C,98C,103C,126C 'success':51B,104C 'support':77C 'system':64B,73C 'trigger':39B 'u/c':143C 'unauthent':89C 'unauthor':112C 'user':8A 'vector':135C 'version':78C 'vulner':65C,87C,108C 'whole':63B","nicknames":[],"mitigations":[],"who_affected":"Systems running Oracle Solaris 11.4 where untrusted users can log on to the host. The sources do not describe a network-only path, so exposure depends on who holds local accounts. Hosts with only trusted administrators and no shell access for others have a lower risk.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:20:21+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91208","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91208","severity":null,"published_at":"2026-10-20T22:20:21+00:00","modified_at":"2026-10-21T18:44:40+00:00","first_seen_at":"2026-10-23T21:57:26+00:00","fetched_at":"2026-10-23T22:29:00+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}