What is the CVSS score of CVE-2026-61202?

CVE-2026-61202 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N. EPSS exploitation probability: 0.1%.

Which versions of Oracle Solaris are affected by CVE-2026-61202?

A local privilege escalation vulnerability in Oracle Solaris 11.3 and 11.4 allows low-privileged users to access critical system data and potentially compromise connected systems; no public exploit…

How to fix or mitigate CVE-2026-61202?

Within 24 hours, identify and inventory all systems running Oracle Solaris 11.3 or 11.4 in your environment. Within 7 days, audit local user access to affected systems, restrict unnecessary local accounts to privileged users only, and implement enhanced monitoring for privilege escalation attempts. Within 30 days, continuously monitor Oracle security advisories for patch availability, prepare a deployment plan for vendor-released patches when available, and consider network segmentation to limit blast radius of compromised Solaris systems.

Oracle Solaris CVE-2026-61202

EUVD-2026-47406 HIGH

Improper Access Control (CWE-284)

2026-07-21 secalert_us@oracle.com

GHSA-m2j4-mph7-xhvc

Authentication Bypass Oracle Solaris

7.5

CVSS 3.1 · Vendor: oracle

Severity by source

Vendor (oracle) PRIMARY

7.5 HIGH

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

vuln.today AI

7.5 HIGH

Requires an authenticated local logon (AV:L, PR:L) under difficult conditions (AC:H); privileged Utility crosses a boundary (S:C) yielding high C/I impact with no availability effect (A:N).

3.1 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

4.0 AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 00:14 vuln.today

CVE Published

Jul 21, 2026 - 22:18 nvd

HIGH 7.5

DescriptionCVE.org

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Solaris accessible data as well as unauthorized access to critical data or complete access to all Oracle Solaris accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N).

AnalysisAI

Local privilege-boundary compromise in Oracle Solaris 11.3 and 11.4 (Utility component) allows a low-privileged attacker with a local logon to gain unauthorized read and write access to critical Solaris data, with a scope change that can significantly impact additional products beyond Solaris itself. The flaw carries a CVSS 3.1 base score of 7.5 despite requiring high attack complexity, reflecting the high confidentiality and integrity impact combined with scope change. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV.

Technical ContextAI

The vulnerability resides in the 'Utility' component of Oracle Solaris, Oracle's enterprise UNIX operating system, affecting the currently supported 11.3 and 11.4 release lines. The CVSS scope change (S:C) indicates the vulnerable Utility component operates in a security authority (likely privileged or setuid/setgid) that, when abused, allows an attacker to affect resources managed by a different security authority - a classic privilege-boundary or authority-crossing weakness consistent with the vendor 'Authentication Bypass' tag. No CWE was assigned by NVD, so the precise root cause class (e.g., improper privilege management, path/argument injection into a privileged utility) cannot be confirmed from the available data and must be inferred from the scope-change semantics.

RemediationAI

Apply the Oracle Critical Patch Update of July 2026, which is referenced as the vendor advisory at https://www.oracle.com/security-alerts/cpujul2026.html - patch available per vendor advisory; consult that page for the exact Solaris 11.3 and 11.4 patch/SRU bundle, as an explicit fixed version string was not included in the provided data and should not be invented. Because exploitation requires a local low-privilege logon, effective compensating controls until patching include restricting interactive and shell access to Solaris hosts to trusted administrators only, auditing and removing unnecessary local accounts, and constraining the affected privileged Utility (for example limiting its execute permissions or RBAC profile assignment) - with the trade-off that tightening access to a system utility may disrupt legitimate operational scripts or user workflows that depend on it. Monitor for anomalous use of the utility and unexpected cross-privilege data access as a detective control.