CVE-2026-21942
Unknown Unknown - Not Provided

BaseFortify

Vulnerability report for CVE-2026-21942, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-01-20

Last updated on: 2026-01-29

Assigner: Oracle

Description

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-01-20
Last Modified
2026-01-29
Generated
2026-07-06
AI Q&A
2026-01-21
EPSS Evaluated
2026-07-05
NVD
EUVD

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
oracle solaris 10
oracle solaris 11

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in the Oracle Solaris Filesystems component for versions 10 and 11. It allows a low privileged attacker who has logged into the system to exploit the vulnerability, but it requires another person to interact (human interaction) for the attack to succeed. Successful exploitation can cause the Oracle Solaris system to hang or crash repeatedly, resulting in a denial of service (DoS).

Impact Analysis

The impact of this vulnerability is a denial of service (DoS) condition on Oracle Solaris systems, where an attacker can cause the system to hang or crash repeatedly. This can disrupt availability of services running on the affected system.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-21942. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart