Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 7.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpujul2026.html | Vendor Advisory |
Configurations
History
31 Jul 2026, 17:25
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:oracle:solaris:11.4:*:*:*:*:*:*:* | |
| First Time |
Oracle
Oracle solaris |
|
| References | () https://www.oracle.com/security-alerts/cpujul2026.html - Vendor Advisory |
24 Jul 2026, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-269 |
21 Jul 2026, 22:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-07-21 22:18
Updated : 2026-07-31 17:25
NVD link : CVE-2026-60833
Mitre link : CVE-2026-60833
CVE.ORG link : CVE-2026-60833
JSON object : View
Products Affected
oracle
- solaris
CWE
CWE-269
Improper Privilege Management