Oracle Solaris CVE-2026-60661

Requires an interactive or low-privileged local logon to the Solaris 11.4 host (CVSS PR:L, AV:L) - this is not remotely reachable and cannot be triggered without an existing account or foothold on the system. The vulnerability is in the Filesystems component, so exploitation depends on the attacker being able to invoke filesystem operations that reach the flawed code path. Exploitation is explicitly rated difficult (AC:H), meaning the attacker must satisfy conditions outside their control (such as a race window, specific filesystem state, or timing) rather than exploit a default, deterministic path. No user interaction is required (UI:N). Limiting factors: local access requirement, low-but-nonzero privilege prerequisite, high attack complexity, and applicability confirmed only to Solaris 11.4.

The CVSS 3.1 vector (AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H, base 7.8 High) describes a locally exploitable, hard-to-execute flaw requiring pre-existing low privileges but yielding total system takeover with scope change. The high attack complexity (AC:H) and local vector (AV:L) meaningfully reduce real-world exploitability: an attacker must already have an account on the host and win non-trivial conditions to succeed, so this is a privilege-escalation/post-compromise risk rather than a remotely wormable one. No EPSS score, KEV listing, or POC was provided, and no CWE was assigned, so exploitation-probability signals are absent - the 7.8 is driven by impact, not by ease or evidence of exploitation. This is a legitimate priority for multi-user Solaris hosts (where local users or a foothold exist) but a lower priority for single-tenant or tightly access-controlled deployments. Note the tag 'Information Disclosure' conflicts with the full C:H/I:H/A:H takeover impact in the description - the Oracle CPU description (takeover) should be treated as authoritative over the coarse tag.

An attacker who has already obtained a low-privileged shell on an Oracle Solaris 11.4 server (via stolen credentials, a compromised application, or as a malicious insider) targets the vulnerable Filesystems component. By winning the required high-complexity conditions, they escalate to full control of the host and, because of the scope change, affect resources beyond Solaris itself. No public exploit code has been identified, so exploitation currently requires original research or a private capability.