Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpuoct2026.html |
Configurations
No configuration.
History
21 Oct 2026, 11:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-287 CWE-306 |
20 Oct 2026, 22:19
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-20 22:19
Updated : 2026-10-21 18:44
NVD link : CVE-2026-60432
Mitre link : CVE-2026-60432
CVE.ORG link : CVE-2026-60432
JSON object : View
Products Affected
No product.