中文

// CVE · PUBLISHED 2026-10-20

CVE-2026-101537

Oracle Corporation / Oracle Solaris

9.8 · CVSS 3.1Critical

Description

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

References

Related CVEs

  • CVE-2026-101765Oracle Corporation / Oracle Communications Billing and Revenue ManagementCVSS 9.1
  • CVE-2026-101763Oracle Corporation / Oracle Communications BRM - Elastic Charging EngineCVSS 9.8
  • CVE-2026-101634Oracle Corporation / Oracle Mobile Field ServiceCVSS 9.1
  • CVE-2026-101590Oracle Corporation / HelidonCVSS 9.1
  • CVE-2026-101529Oracle Corporation / Oracle Enterprise Manager for Oracle DatabaseCVSS 9.9
  • CVE-2026-101528Oracle Corporation / Oracle Enterprise Manager for Oracle DatabaseCVSS 9.9
  • CVE-2026-101521Oracle Corporation / Oracle APEXCVSS 9.8
  • CVE-2026-101503Oracle Corporation / Oracle Trusted Answer SearchCVSS 9.9

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.