---
id: "CVE-2026-91208"
kind: "vulnerability"
aliases: ["CVE-2026-91208"]
title: "Oracle Solaris 11.4 Services flaw lets local users crash the host"
severity: "medium"
cvss: 5.1
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "on-prem", "oracle-solaris", "servers", "solaris"]
not_affected_if: ["no-untrusted-local-logins"]
published_at: "2026-10-20T22:20:21+00:00"
first_seen_at: "2026-10-23T21:57:26+00:00"
updated_at: "2026-10-25T04:29:03+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91208", "first_seen_at": "2026-10-23T21:57:26+00:00"}]
---

# Oracle Solaris 11.4 Services flaw lets local users crash the host

A flaw in the Services component of Oracle Solaris 11.4 can be triggered by an attacker who already has a logon on the machine. Successful exploitation can cause a hang or a repeatable crash of the whole system.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `uname -v` on the Solaris host to read the release build and compare it with Oracle's patch advisory for CVE-2026-91208
- Run `pkg info entire` to see the installed Solaris 11.4 package version

## Fix

- Apply the Oracle Solaris 11.4 security update that Oracle lists for CVE-2026-91208 (version unknown from the sources)

## Timeline

- 2026-10-23T21:57:26+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-91208

## From the sources

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services).   The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_