Live › vulnerability › CVE-2026-91253
Go to dashboardA flaw in the Solaris 11.4 kernel lets a low-privileged local user with logon access compromise the operating system. A successful attack can give full takeover, with high impact to confidentiality, integrity and availability.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running Oracle Solaris 11.4 where a person or process can log in locally. Hosts with no local logons beyond administrators are at lower practical risk, but the sources do not say which configurations are exposed. Teams running only non-Solaris systems can skip it.
No product ranges from the sources yet.
uname -v on each Solaris host to see the release build.pkg info entire to list the installed Solaris 11.4 package version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91253")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.