Live › vulnerability › CVE-2026-91252
Go to dashboardAn unauthenticated remote attacker sending HTTP requests to Oracle Solaris 11.4 can cause a hang or repeatable crash of the system. The same flaw also allows read access to a subset of data the system holds.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running Oracle Solaris 11.4 whose Services component is reachable over HTTP from the network are exposed. The sources do not say which Services component or HTTP endpoint is involved, so hosts with no network-facing HTTP services are likely less exposed. Teams not running Solaris 11.4 can skip it.
No product ranges from the sources yet.
uname -v and pkg info entire on Oracle Solaris 11.4 hostsEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris and unauthorized read access to a subset of Oracle Solaris accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91252")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.