CVE-2026-91324
Medium · 4.7CVSS
4.7
EPSS
0.1%
Published
Oct 20, 2026
CISA due date
—
The record
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 4.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-118276 A vulnerability was determined in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118275 A vulnerability was found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118274 A vulnerability has been found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118273 A flaw has been found in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-118271 A security vulnerability has been detected in a2ui-project a2ui up to 0.10.6. CWE-404
- CVE-2026-117505 A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. CWE-404
- CVE-2026-117506 A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. CWE-404
- CVE-2026-117504 A vulnerability was identified in a2aproject a2a-go up to 2.4.0. CWE-404