Live › vulnerability › CVE-2026-91537
Go to dashboardA flaw in the Utility component of Oracle Solaris 11.4 lets an attacker with a low-privileged local login compromise the operating system. Successful exploitation gives the attacker full takeover, with high impact to confidentiality, integrity and availability.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running Oracle Solaris 11.4 where untrusted or low-privileged users can log in locally. Hosts with no local logins beyond administrators have a smaller exposure, but the sources do not say whether any configuration narrows the attack. Teams running other operating systems or older Solaris releases can skip this entry.
No product ranges from the sources yet.
uname -v on the host and check whether it reports Solaris 11.4.pkg info entire and compare against the fixed build in Oracle's advisory.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-91537")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.