CVE-2026-101537

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Configurations

No configuration.

History

21 Oct 2026, 11:16

Type Values Removed Values Added
CWE CWE-287
CWE-306

20 Oct 2026, 22:18

Type Values Removed Values Added
New CVE

Information

Published : 2026-10-20 22:18

Updated : 2026-10-21 18:44


NVD link : CVE-2026-101537

Mitre link : CVE-2026-101537

CVE.ORG link : CVE-2026-101537


JSON object : View

Products Affected

No product.

CWE
CWE-287

Improper Authentication

CWE-306

Missing Authentication for Critical Function