{"id":"CVE-2026-91324","kind":"vulnerability","aliases":["CVE-2026-91324"],"related":[],"title":"Oracle Solaris 11.4 Libraries flaw lets local users crash the system","description":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries).   The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 4.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H).","summary":"A flaw in the Libraries component of Oracle Solaris 11.4 can be triggered by a local logged-in user, causing a hang or repeatable crash of the operating system. The attack is hard to execute and needs a person other than the attacker to take an action.","severity":"medium","cvss":4.7,"epss":0.00118,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","on-prem","oracle-solaris","shared-hosts","solaris"],"not_affected_if":["no-local-logins","non-solaris"],"how_to_check":"- Run `uname -v` on the Solaris host and compare against Oracle's July 2026 or later patch set for Solaris 11.4 (unknown exact patch ID from the sources)\n- Run `pkg info entire` to see the installed Solaris 11.4 package version","fix":"- Apply the latest Oracle Solaris 11.4 SRU (support repository update) that includes the Oracle Critical Patch Update fix for CVE-2026-91324 (exact SRU number unknown)\n- Run `pkg update` and reboot into the new boot environment","status":"open","published_at":"2026-10-20T22:20:34+00:00","first_seen_at":"2026-10-23T21:57:26+00:00","triaged_at":"2026-10-25T04:35:05+00:00","updated_at":"2026-10-25T12:38:52+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-25T04:35:05Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the latest Oracle Solaris 11.4 SRU (support repository update) that includes the Oracle Critical Patch Update fix for CVE-2026-91324 (exact SRU number unknown)\n- Run `pkg update` and reboot into the new boot environment","reach":"local","title":"Oracle Solaris 11.4 Libraries flaw lets local users crash the system","impact":"medium","summary":"A flaw in the Libraries component of Oracle Solaris 11.4 can be triggered by a local logged-in user, causing a hang or repeatable crash of the operating system. The attack is hard to execute and needs a person other than the attacker to take an action.","category":"infrastructure","nicknames":[],"who_cares":["solaris","oracle-solaris","on-prem","shared-hosts"],"confidence":0.6,"needs_auth":"yes","worst_case":"local user crashes or hangs the Solaris host repeatedly","analyst_note":"","how_to_check":"- Run `uname -v` on the Solaris host and compare against Oracle's July 2026 or later patch set for Solaris 11.4 (unknown exact patch ID from the sources)\n- Run `pkg info entire` to see the installed Solaris 11.4 package version","needs_analyst":false,"not_affected_if":["no-local-logins","non-solaris"],"who_is_affected":"Systems running Oracle Solaris 11.4 where local users can log in, since the attacker must already have logon to the machine. Multi-user servers and shared hosts carry the most exposure, while single-user or fully locked-down hosts carry less. Systems not running Solaris 11.4 are not affected according to the sources.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000654,"input_tokens":3478,"output_tokens":612,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-91324':14A,17A '/av':162C '11.4':3A,38B,95C '3.1':152C,161C '4.7':155C 'abil':137C 'action':76B 'affect':93C 'allow':100C 'attack':60B,72B,102C,117C,127C,129C 'avail':156C 'base':153C 'caus':49B,139C 'complet':146C 'compon':34B,86C 'compromis':113C 'crash':9A,54B,145C 'cve':12A,15A 'cvss':151C,158C,160C 'difficult':96C 'dos':147C 'execut':64B,111C 'exploit':98C 'flaw':5A,30B 'frequent':143C 'h':170C 'h/pr':164C 'hang':51B,141C 'hard':62B 'host':27B 'human':119C 'impact':157C 'infrastructur':18B,107C 'interact':120C 'l/ac':163C 'let':6A 'librari':4A,33B,87C 'local':7A,44B 'log':46B 'logged-in':45B 'logon':104C 'n/a':169C 'n/i':168C 'n/ui':165C 'need':66B 'on-prem':19B 'oper':57B 'oracl':1A,23B,36B,80C,84C,109C,114C,149C 'oracle-solari':22B 'person':68B,123C 'prem':21B 'product':82C 'r/s':166C 'repeat':53B,144C 'requir':118C 'result':134C 'score':154C 'share':26B 'shared-host':25B 'solari':2A,24B,28B,37B,81C,110C,115C,150C 'success':116C,128C 'support':89C 'system':11A,58B,85C 'take':74B 'trigger':41B 'u/c':167C 'unauthent':101C 'unauthor':136C 'user':8A,48B 'vector':159C 'version':90C 'vulner':77C,99C,132C","nicknames":[],"mitigations":[],"who_affected":"Systems running Oracle Solaris 11.4 where local users can log in, since the attacker must already have logon to the machine. Multi-user servers and shared hosts carry the most exposure, while single-user or fully locked-down hosts carry less. Systems not running Solaris 11.4 are not affected according to the sources.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:20:34+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91324","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91324","severity":null,"published_at":"2026-10-20T22:20:34+00:00","modified_at":"2026-10-21T18:44:40+00:00","first_seen_at":"2026-10-23T21:57:26+00:00","fetched_at":"2026-10-23T22:29:00+00:00","note":null},{"source":"epss","external_id":"CVE-2026-91324","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-91324","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:52+00:00","fetched_at":"2026-10-25T12:38:52+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}