Oracle Solaris CVE-2026-91324

Exploitation requires the attacker to already have local logon access to the infrastructure where Oracle Solaris 11.4 executes (AV:L) - this is not remotely reachable over the network. It additionally depends on human interaction from a person other than the attacker (UI:R), meaning a separate legitimate user or operator must perform an action that triggers the flaw in the affected Solaris library. The attack is further limited by high attack complexity (AC:H), indicating conditions outside the attacker's control or significant effort are needed for reliable success. The only achievable outcome is an availability loss (hang or repeatable crash / complete DOS) - no confidentiality or integrity impact. Affected scope is specifically Oracle Solaris 11.4; other versions are not listed as affected.

This is a genuinely low-to-moderate priority issue despite being a complete denial-of-service, and the CVSS base score of 4.7 (MEDIUM) accurately reflects that. The CVSS vector is the dominant signal and it is heavily limiting: AV:L means the attacker needs local logon access to the host running Oracle Solaris (not remote network reach), AC:H means the attack is hard to carry out reliably, and UI:R means a separate, legitimate user must take some action for the attack to succeed. The only impact is availability (A:H, C:N/I:N) - a hang or repeatable crash. No EPSS score was provided in the input, there is no CISA KEV listing, and no public proof-of-concept was referenced, so all three exploitation-likelihood signals are either absent or negative. One point worth flagging: Oracle's prose says 'unauthenticated attacker with logon to the infrastructure,' which is internally tension-laden - PR:N (unauthenticated) combined with AV:L (local logon access needed) means the attacker needs some foothold/session on the box but no application-level credentials; this is consistent but should be understood as 'needs local access, not network access.' Net: a real but low-urgency availability bug, not a widespread-exploitation concern.

An attacker with local logon access to a Solaris 11.4 host plants or triggers a malformed input handled by the vulnerable library, then waits for a legitimate user or process to interact with it (UI:R), causing the affected library routine to hang or crash and bringing down the service or system (complete DOS). Because the attack is difficult (AC:H) and requires that separate human interaction, reliable exploitation is non-trivial. No public exploit identified at time of analysis.