CVE-2026-87422

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with access to the underlying infrastructure to compromise the system. The attack requires human interaction from a user other than the atta...

CVE-2026-87417

A vulnerability exists in the Image Packaging System component of Oracle Solaris version 11.4 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or complete acce...

CVE-2026-87413

A vulnerability exists in the Filesystems component of Oracle Solaris version 11.4 . This easily exploitable flaw allows a low-privileged attacker with local infrastructure access to compromise the system. Successful exploitation can lead to a hang or a frequently repeatable crash , resulting in ...

CVE-2026-87414

A vulnerability exists in the Image Packaging System component of Oracle Solaris version 11.4 . An unauthenticated attacker with network access via TLS can exploit this high-complexity vulnerability, though it requires human interaction from a third party. Successful exploitation may allow the at...

CVE-2026-87411

A vulnerability exists in the Filesystems component of Oracle Solaris version 11.4 . A low-privileged attacker with local access to the infrastructure can exploit this flaw to cause a hang or frequently repeatable crash , resulting in a complete Denial of Service (DoS) . No specific exploit links...

CVE-2026-60662

A vulnerability exists in the Services component of Oracle Solaris version 11.4 . This easily exploitable flaw allows a low privileged attacker with logon access to the underlying infrastructure to compromise the system. Successful exploitation can result in a full takeover of Oracle Solaris . Mi...

CVE-2026-60453

A vulnerability exists in the X Window System component of Oracle Solaris 11.4 . A low-privileged attacker with local access to the infrastructure can exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized read, update, insert, or delete access to certain acc...

CVE-2026-47025

A vulnerability exists in the Utility component of Oracle Solaris (affected versions 11.3 and 11.4 ). A low privileged attacker with network access via HTTP can easily exploit this flaw to compromise the system, potentially leading to a complete takeover of Oracle Solaris. The vulnerability is as...

CVE-2026-60432

A vulnerability exists in the Image Packaging System component of Oracle Solaris versions 11.3 and 11.4 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation can lead to a complete takeover of Oracle Solaris . Whi...

CVE-2026-101537

A critical vulnerability exists in the Utility component of Oracle Solaris version 11.4 . An unauthenticated attacker with network access via TCP can easily exploit this flaw to compromise the system, potentially leading to a full takeover of Oracle Solaris. The vulnerability has a CVSS 3.1 Base ...

PT-2026-119737

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description An issue in the Services component allows an unauthenticated attacker with access to the infrastructure where the system executes to compromise the environment. Exploitation is difficult and requires hum...

PT-2026-119532

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 11.3 and 11.4 Description A flaw in the Image Packaging System allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full takeover of the affecte...

PT-2026-119736

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description An issue exists in the Image Packaging System component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation requires human interaction a...

PT-2026-119728

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Filesystems component allows a low-privileged attacker with local access to the infrastructure to compromise the system. Successful exploitation can lead to a system hang or frequent crashe...

PT-2026-119732

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Image Packaging System allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to critical data or...

PT-2026-119738

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description An issue exists in the X Window System component. A low privileged attacker with logon access to the infrastructure where the system executes can compromise the environment. Successful exploitation may...

PT-2026-119726

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Filesystems component allows a low-privileged attacker with local access to the infrastructure to compromise the system. Successful exploitation can lead to a system hang or frequent crashe...

PT-2026-119220

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Utility component allows an unauthenticated attacker with network access via TCP to compromise the system. Successful exploitation can lead to a full takeover of the affected system...

PT-2026-119729

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Image Packaging System allows an unauthenticated attacker with network access via TLS to compromise the system. Exploitation is difficult and requires human interaction from a user other th...

Astra Linux – Vulnerability in Ansible

A flaw was discovered in the solariszone module from the Ansible Community modules. When setting the name of a zone on the Solaris host, the zone name is checked by listing the process using the ‘ps’ command on the remote machine. An attacker could exploit this flaw by creating a fake zone name a...