What is the CVSS score of EUVD-2026-37233?

EUVD-2026-37233 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H. EPSS exploitation probability: 0.1%.

How to fix or mitigate EUVD-2026-37233?

Within 24 hours: Identify and inventory all Solaris 11.4 systems in your environment. Within 7 days: Restrict local system access to verified users; enable comprehensive audit logging for filesystem operations and privilege escalation attempts. Within 30 days: Coordinate with Oracle regarding patch timeline; evaluate strategic alternatives including workload migration or platform upgrade if remediation timelines extend beyond acceptable risk tolerance.

Oracle Solaris EUVD-2026-37233

| CVE-2026-46914 HIGH

Improper Privilege Management (CWE-269)

2026-06-16 oracle

Authentication Bypass Privilege Escalation Oracle Oracle Solaris Oracle Corporation

7.1

CVSS 3.1 · Vendor: oracle

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Obtain low-privileged shell on Solaris 11.4 host
Delivery

Invoke vulnerable Filesystem component operation
Exploit

Read protected filesystem data outside privilege scope
Execution

Re-trigger flaw to hang or panic kernel
Impact

Complete denial of service of Solaris instance

Vulnerability Assessment

Weakness	CWE CWE-269 MITRE ATT&CK 1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. Sign in to read
Exploitation Conditions	Attacker must have an interactive local logon on the Oracle Solaris 11.4 host (CVSS AV:L, PR:L) and the ability to invoke the vulnerable Filesystem component code path; no user interaction by another account is required (UI:N) and attack complexity is low (AC:L), meaning no race window or special tuning. Exploitation is limited to Oracle Solaris 11.4 specifically - earlier or unsupported Solaris releases are not listed as affected - and cannot be performed remotely without first obtaining shell, SSH, or console credentials, so hosts that grant logon only to vetted administrators face materially lower exposure than multi-tenant or shared-shell environments.
Impact	The CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H places this firmly in the 'local but easy' tier: any user who can log in to a Solaris 11.4 host can both exfiltrate sensitive filesystem data (C:H) and crash the OS (A:H) without user interaction, but they cannot reach it over the network and cannot tamper with data (I:N). EPSS and SSVC data were not provided, and the CVE is not on CISA KEV, so there is no evidence of in-the-wild abuse - risk is driven by exposure profile, not active campaigns. Real-world priority is high on multi-tenant Solaris systems (shared compute, jump hosts, university or hosting fleets where many non-admin users have shell) and materially lower on single-tenant appliances where only operators log in; note also the 'Authentication Bypass' tag conflicts with the CVSS PR:L (low-priv auth required) - the vector should be treated as authoritative until Oracle's advisory clarifies.
Exploit ScenarioDerived	A developer or batch-job account with an ordinary shell on a shared Solaris 11.4 build server abuses the vulnerable Filesystem code path to read files belonging to other tenants or to root (for example, private keys or database credentials) and, in the same session, triggers the bug a second time to hang or crash the host, causing a complete outage of the workloads on that node. Because attack complexity is low and no user interaction is required, the action can be scripted and repeated; no public exploit identified at time of analysis, but the conditions favor straightforward weaponization once technical details emerge.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).

No patch listed yet 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Jun 16, 2026

Local privilege abuse in Oracle Solaris 11.4 allows a low-privileged authenticated user with logon access to the host to read sensitive filesystem data and trigger a complete denial of service of the operating system. Oracle's June 2026 Critical Patch Update lists this as easily exploitable through the Filesystem component, with a CVSS 3.1 base score of 7.1; no public exploit identified at time of analysis and the issue is not on the CISA KEV list.

RemediationAI

Apply the Filesystem fixes from Oracle's June 2026 Critical Patch Update (https://www.oracle.com/security-alerts/cspujun2026.html) by installing the corresponding Solaris 11.4 SRU on every affected host - Patch available per vendor advisory; the specific patched SRU number is not included in the input data and should be taken directly from the CPU matrix. Until the SRU is deployed, reduce blast radius by restricting interactive logon on Solaris 11.4 systems to trusted administrators (tighten /etc/security/policy.conf, PAM, and RBAC profiles, and remove shell access for service or batch accounts), and monitor for unexpected system panics or hangs that could indicate exploitation attempts; the trade-off is reduced operational flexibility for shared-use hosts and possible disruption to automation accounts that legitimately need login. Do not rely on network controls alone - the vector is local (AV:L), so firewalling will not mitigate.

Affected VersionsENISA

Oracle Solaris 11.4

Affected Packages

euvd oracle_solaris no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

The flaw resides in the Filesystem component of Oracle Solaris 11.4, Oracle's enterprise UNIX platform commonly deployed on SPARC and x86 server infrastructure (CPE cpe:2.3:a:oracle_corporation:oracle_solaris:*). Although NVD does not assign a CWE, the combination of high confidentiality and high availability impact with no integrity impact, reached via local access, is characteristic of a filesystem access-control or resource-handling defect - for example improper permission enforcement on a virtual filesystem object or an unchecked condition that lets a local user read protected data and panic/hang the kernel. The 'Authentication Bypass' tag from the input intelligence suggests the underlying weakness may let a logged-in user reach data or operations normally gated by stronger filesystem authorization.

Know when Oracle Solaris gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (oracle) PRIMARY 7.1 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

vuln.today AI 7.1 HIGH

Local logon required (AV:L, PR:L); easily exploitable per Oracle (AC:L); no user interaction; gives full read of accessible data (C:H) and full OS crash (A:H) with no integrity impact (I:N).

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (oracle).

CVSS VectorVendor: oracle

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

DescriptionCVE.org

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Solaris accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 7.1 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H).

Executive ViewAI

Why It Matters

Oracle Solaris 11.4 contains a local privilege escalation vulnerability in the Filesystem component that allows authenticated users to access sensitive files and completely disable the operating system. Organizations running Solaris face both data breach and operational continuity risks. No public exploit has been identified, but the issue is easily exploitable.

Business Impact: High

Compensating Controls

Restrict local system logon privileges to authorized personnel only; implement filesystem-level access controls to limit sensitive data exposure; enable detailed audit logging for filesystem operations, privilege escalation attempts, and unexpected system resource consumption; maintain alert monitoring for system crashes or abnormal behavior indicative of exploitation attempts.

Threat Intelligence Overview

EPSS Score

0.1%

Top 96% exploitable

Threat Intel

1 sources

Data Quality

6 sources

Confidence: High

EUVD

NVD

CVE.org

EPSS

Vulnrichment NEWS

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC No

EPSS 0.1%

Patch available No

Active threat No

Deciding rule

HIGH severity (CVSS 7.0-8.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision

Scheduled

Exploitation

None

System Exposure· derived

Small

Automatable

Human Impact

High

Technical Impact

Partial

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +36

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Authentication Bypass CRITICAL

Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.

Privilege Escalation HIGH

Privilege escalation occurs when an attacker leverages flaws in access control mechanisms to gain permissions beyond what they were originally granted.