Oracle Solaris CVE-2026-91242

Exploitation requires the attacker to already have a high-privilege local logon (PR:H, AV:L) to the infrastructure where Oracle Solaris 11.4 executes, and additionally requires interaction from a different human user (UI:R) to complete the attack against the Plugins component. These two prerequisites - pre-existing elevated privilege plus a second human in the loop - are the primary limiting factors and mean the flaw cannot be triggered by a remote or unauthenticated attacker. The compensating risk factor is Scope:Changed: a successful attack can affect products beyond Solaris itself. No specific non-default configuration is named in the description, so the condition is best characterized as 'privileged local actor plus victim interaction against the Plugins component.'

This is a moderate-priority issue rather than an urgent one, and the CVSS signals are largely internally consistent. The CVSS 3.1 vector (AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N, 7.4) describes a locally-exploitable flaw that requires an attacker to already hold HIGH privileges on the Solaris host AND requires interaction from a separate human victim - two significant gating conditions that sharply reduce real-world attacker reach despite the HIGH confidentiality and integrity impacts. The 7.4 score is inflated primarily by the Scope:Changed metric (attacks may impact additional products beyond Solaris itself) rather than by ease of access. No EPSS score, KEV listing, or POC was provided in the input, so there is no public exploitation signal: no public exploit identified at time of analysis. The practical risk profile is 'privileged insider or post-compromise lateral/privilege-boundary escalation' rather than mass remote exploitation. One data caveat: the input Tags include 'Authentication Bypass', which conflicts with the vector's PR:H (the attack presupposes high existing privilege rather than bypassing authentication) - verify the vulnerability class against Oracle's October 2026 CPU advisory before treating it as an auth-bypass.

An attacker who already holds high privileges on an Oracle Solaris 11.4 system (e.g. a compromised privileged service account or a malicious administrator) abuses a flaw in the Plugins component, then relies on a separate legitimate user performing an action to trigger the condition. Because the scope changes, successful exploitation can read or alter critical data not only within Solaris but in additional connected products. No public exploit code was identified at time of analysis.