Live › vulnerability › CVE-2026-91249
Go to dashboardA flaw in the Libraries component of Oracle Solaris 11.4 lets a low-privileged local user with logon access read a subset of data the system can access. The sources describe confidentiality impact only, with no integrity or availability loss.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running Oracle Solaris 11.4 where untrusted or low-privileged users have local logon access. Systems without local user accounts exposed to untrusted parties are less at risk, but the sources do not say which configurations are affected.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-91249")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.