Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

oracle CPUOct2026: MySQL Cluster >=9.7.0|<=9.7.4

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.38

oracle CPUOct2026: MySQL Cluster >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.50

oracle CPUOct2026: MySQL Cluster >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Server >=9.7.0|<=9.7.4

The version of Solaris installed on the remote host is prior to 11.3.36.37.0. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11_oct2026_SRU11_3_36_37_0 advisory.

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version     that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network     access via TCP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in     takeover of Oracle Solaris. (CVE-2026-101537)

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions     that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows low privileged attacker with     network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result     in takeover of Oracle Solaris. (CVE-2026-47025)

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System).
    Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of     this vulnerability can result in takeover of Oracle Solaris. (CVE-2026-60432)

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions     that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with     logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks     of this vulnerability can result in takeover of Oracle Solaris. (CVE-2026-91348)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Solaris installed on the remote host is prior to 11.4.94.221.2. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11_oct2026_SRU11_4_94_221_2 advisory.

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions     that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows low privileged attacker with     network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can result     in takeover of Oracle Solaris. (CVE-2026-47025)

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System).
    Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows     unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of     this vulnerability can result in takeover of Oracle Solaris. (CVE-2026-60432)

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported     version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with     logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks     of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris     accessible data as well as unauthorized read access to a subset of Oracle Solaris accessible data and     unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris.
    (CVE-2026-60453)

  - Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version     that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to     the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this     vulnerability can result in takeover of Oracle Solaris. (CVE-2026-60662)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
375168	Oracle Solaris Critical Patch Update : oct2026_SRU11_3_36_37_0	Nessus	Solaris Local Security Checks	Local	critical
375166	Oracle Solaris Critical Patch Update : oct2026_SRU11_4_94_221_2	Nessus	Solaris Local Security Checks	Local	critical

Detections

Analytics

CVE-2026-60432

critical

Tenable Plugins

Coming Soon

critical

critical