Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpujan2026.html | Vendor Advisory |
Configurations
History
29 Jan 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:* | |
| First Time |
Oracle solaris
Oracle |
|
| References | () https://www.oracle.com/security-alerts/cpujan2026.html - Vendor Advisory |
20 Jan 2026, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-20 22:15
Updated : 2026-01-29 21:16
NVD link : CVE-2026-21928
Mitre link : CVE-2026-21928
CVE.ORG link : CVE-2026-21928
JSON object : View
Products Affected
oracle
- solaris
CWE