Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

oracle CPUOct2026: MySQL Cluster >=9.7.0|<=9.7.4

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.38

oracle CPUOct2026: MySQL Cluster >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.50

oracle CPUOct2026: MySQL Cluster >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Server >=9.7.0|<=9.7.4

The version of Solaris installed on the remote host is prior to 11.3.36.37.0. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11_oct2026_SRU11_3_36_37_0 advisory.

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version     that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network     access via TCP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in     takeover of Oracle Solaris. (CVE-2026-101537)

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions     that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows low privileged attacker with     network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result     in takeover of Oracle Solaris. (CVE-2026-47025)

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System).
    Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of     this vulnerability can result in takeover of Oracle Solaris. (CVE-2026-60432)

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions     that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with     logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks     of this vulnerability can result in takeover of Oracle Solaris. (CVE-2026-91348)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Solaris installed on the remote host is prior to 11.4.95.227.1. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11_oct2026_SRU11_4_95_227_1 advisory.

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version     that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network     access via TCP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in     takeover of Oracle Solaris. (CVE-2026-101537)

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported     version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with     logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks     of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of Oracle Solaris. (CVE-2026-87411, CVE-2026-87413)

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The     supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via TLS to compromise Oracle Solaris. Successful attacks require human     interaction from a person other than the attacker. Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of Oracle Solaris accessible data. (CVE-2026-87414)

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The     supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated     attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this     vulnerability can result in unauthorized access to critical data or complete access to all Oracle Solaris     accessible data. (CVE-2026-87417)

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The     supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated     attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks require human     interaction from a person other than the attacker. Successful attacks of this vulnerability can result in     unauthorized access to critical data or complete access to all Oracle Solaris accessible data as well as     unauthorized update, insert or delete access to some of Oracle Solaris accessible data. (CVE-2026-87421)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
375168	Oracle Solaris Critical Patch Update : oct2026_SRU11_3_36_37_0	Nessus	Solaris Local Security Checks	Local	critical
375167	Oracle Solaris Critical Patch Update : oct2026_SRU11_4_95_227_1	Nessus	Solaris Local Security Checks	Local	critical

Detections

Analytics

CVE-2026-101537

critical

Tenable Plugins

Coming Soon

critical

critical