What is the CVSS score of CVE-2026-60834?

CVE-2026-60834 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N. EPSS exploitation probability: 0.2%.

Which versions of Oracle Solaris are affected by CVE-2026-60834?

A vulnerability in Oracle Solaris 11.4's Remote Administration Daemon (RAD) component allows low-privileged, network-authenticated attackers to read all Solaris-accessible data and modify a subset of…

How to fix or mitigate CVE-2026-60834?

Within 24 hours, inventory all Oracle Solaris 11.4 systems and identify those exposed to untrusted networks and critical infrastructure. Within 7 days, apply Oracle's July 2026 Critical Patch Update to all affected Solaris 11.4 systems, prioritizing internet-facing and business-critical systems. Within 30 days, complete patch deployment across the entire environment, validate successful application, and implement enhanced monitoring for anomalous RAD component activity and unauthorized data access attempts.

Oracle Solaris CVE-2026-60834

EUVD-2026-47135 HIGH

Improper Access Control (CWE-284)

2026-07-21 secalert_us@oracle.com

GHSA-fw66-xr5f-2r8m

Authentication Bypass Oracle Solaris

7.1

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

7.1 HIGH

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

vuln.today AI

7.1 HIGH

Network-reachable RAD needs low-privileged credentials (PR:L) and a hard-to-meet precondition (AC:H); scope change (S:C) from cross-boundary impact, high confidentiality, limited integrity, no availability effect.

3.1 AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

4.0 AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:L/SI:N/SA:N

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 01:53 vuln.today

CVE Published

Jul 21, 2026 - 22:18 nvd

HIGH 7.1

DescriptionCVE.org

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low privileged attacker with network access via RAD to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Solaris accessible data as well as unauthorized update, insert or delete access to some of Oracle Solaris accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N).

AnalysisAI

Elevated information disclosure and data tampering in Oracle Solaris 11.4 allows a low-privileged, network-authenticated attacker to abuse the Remote Administration Daemon (RAD) utility component to gain complete read access to all Solaris-accessible data and modify a subset of it, with a scope change that can significantly impact other products on the host. Oracle rates it CVSS 3.1 7.1 with high attack complexity, and it is addressed in the July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not in CISA KEV, so exploitation is not confirmed in the wild.

Technical ContextAI

The affected component is RAD (Remote Administration Daemon), Solaris' framework for programmatic system management that exposes administrative APIs over network transports (typically via TLS sockets or SSH-tunneled connections) to clients written in C, Python, Java or REST. Because RAD executes privileged management operations on behalf of connecting clients, a flaw in how it authorizes or handles requests can expose data far beyond the caller's intended privilege level. The vendor tag 'Authentication Bypass' and the CVSS scope-change flag (S:C) indicate the defect lets an authenticated but low-privileged principal cross a trust boundary, so the security authority enforcing access is escaped and impact extends to resources managed outside the vulnerable module. No CWE was assigned in the source data, but the behavior is consistent with an authorization/authentication weakness (CWE-285/CWE-287 class) rather than a memory-safety bug.

RemediationAI

Apply the fixes delivered in the Oracle July 2026 Critical Patch Update (https://www.oracle.com/security-alerts/cpujul2026.html) - this is the primary and vendor-recommended remediation; no standalone fixed build number is given in the source data, so treat the CPU July 2026 Solaris 11.4 SRU as the patched release and confirm the exact SRU from Oracle's advisory. Until patched, reduce exposure by restricting network reachability of the RAD service: limit RAD's remote transports (e.g., disable or firewall the network-facing RAD TLS listener and require access over SSH-tunneled/local transport only), and constrain which accounts hold the low-level privileges needed to connect, since the attack requires PR:L credentials. Tightening RAD network access may break remote management tooling and automation that depend on it, so validate operational impact before enforcing. Because this is a scope-change confidentiality issue, also review and rotate any secrets that a low-privileged Solaris account could have exposed via RAD.