Live › vulnerability › CVE-2026-91324
Go to dashboardA flaw in the Libraries component of Oracle Solaris 11.4 can be triggered by a local logged-in user, causing a hang or repeatable crash of the operating system. The attack is hard to execute and needs a person other than the attacker to take an action.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running Oracle Solaris 11.4 where local users can log in, since the attacker must already have logon to the machine. Multi-user servers and shared hosts carry the most exposure, while single-user or fully locked-down hosts carry less. Systems not running Solaris 11.4 are not affected according to the sources.
No product ranges from the sources yet.
uname -v on the Solaris host and compare against Oracle's July 2026 or later patch set for Solaris 11.4 (unknown exact patch ID from the sources)pkg info entire to see the installed Solaris 11.4 package versionpkg update and reboot into the new boot environmentEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 4.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91324")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.