Oracle Solaris CVE-2026-91336

Requires an attacker to have an existing low-privileged local logon to the infrastructure where Oracle Solaris 11.4 executes (AV:L, PR:L) - the flaw is not remotely exploitable and cannot be triggered by an unauthenticated or purely network-based actor. No user interaction is needed (UI:N) and attack complexity is low (AC:L), so once local access is obtained exploitation is straightforward against the affected Utility component. Limiting factors: only version 11.4 is listed as affected, the impact is confined to data integrity (no confidentiality or availability loss), and the requirement for prior authenticated local access substantially narrows the realistic attacker population to insiders or those who have already gained a foothold. The specific Utility feature or command path that must be invoked is not named in the available data and should be confirmed with Oracle.

This is a moderate-severity, local-vector integrity flaw in Oracle Solaris 11.4's Utility component, with Oracle's CVSS 3.1 base score of 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N). The signals are internally consistent and point to a real but bounded risk: exploitation requires local logon with low privileges (PR:L), so it is not remotely reachable, but attack complexity is low (AC:L) and no user interaction is needed, making it reliably exploitable once an attacker has any authenticated foothold. The high-integrity-only impact (C:N/I:H/A:N) combined with a scope change (S:C) is the notable escalation factor - Oracle states attacks 'may significantly impact additional products,' implying the integrity compromise can cross a trust boundary beyond Solaris itself. No EPSS score, CISA KEV listing, or POC was provided in the input, so there is no evidence of active exploitation or public exploit code; this reads as a credential-gated local privilege/integrity issue rather than an urgent internet-facing emergency. Key missing data: no EPSS probability to gauge likelihood, no CWE to characterize the flaw class, and the 'Authentication Bypass' tag conflicts with the CVSS vector (which requires PR:L logon and shows integrity-only impact) - verify the flaw classification with Oracle, as it does not read as a classic auth bypass.

A low-privileged local user already logged into a Solaris 11.4 host invokes the vulnerable Utility component to perform unauthorized creation, deletion, or modification of critical data. Because the scope changes, the integrity impact can extend to additional products or trust domains beyond the originally compromised Solaris instance. No public exploit code was identified in the provided data, and exploitation requires an existing authenticated local foothold.