Executive brief
A security vulnerability has been identified in Oracle Solaris 11.4, a widely used enterprise operating system. A low-privileged attacker with network access could exploit this flaw to gain unauthorized access to sensitive system data or modify critical information. While the attack is difficult to execute, a successful breach could allow an attacker to compromise the entire operating system and potentially impact other connected software products.
Technical details
This vulnerability exists in the Utility component of Oracle Solaris 11.4. It is classified as difficult to exploit (High Attack Complexity) and requires the attacker to have low-level privileges and network access via the Remote Administration Daemon (RAD). The exploit results in a scope change (S:C), meaning the impact can extend beyond the Solaris operating system to other products. Successful exploitation allows for the unauthorized reading of all Solaris-accessible data and the unauthorized modification or deletion of some data. The vulnerability was addressed in the Oracle July 2026 Critical Patch Update.
Affected products
- Oracle Solaris 11.4
Timeline
- 2026-07-21: advisory: Oracle published the July 2026 Critical Patch Update containing this fix.
- 2026-07-21: disclosed