Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

Oracle Solaris Filesystems Can Be Disrupted by Malicious User

CVE-2026-21942 · published 9 months ago
Summary

Certain versions of Oracle Solaris (10 and 11) are vulnerable to a security issue that could cause a denial-of-service (DOS) attack. An attacker with limited access to the system could exploit this vulnerability to make the system become unresponsive or crash frequently. To protect your system, it's recommended to update to a supported version of Oracle Solaris.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
oracle solaris 10
11
cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*
Original advisory text
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged ...
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.0 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-400Uncontrolled Resource Consumption
Timeline
Published20 Jan 2026
Updated26 Oct 2026
First seen7 Mar 2026
Sources
CVE-2026-21942 · NVD
Track software like this
Free during beta