PT-2026-34105 · Oracle · Oracle Solaris+1

Published 2026-04-21 · Updated 2026-04-26 · CVE-2026-34281

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4

Description A flaw in the Kernel component allows a low-privileged attacker with logon access to the infrastructure where the system executes to compromise the environment. Successful exploitation can lead to a complete denial of service (DOS), characterized by the unauthorized ability to cause a system hang or frequently repeatable crashes. This issue may also significantly impact additional products due to a change in scope.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2026-34281

Affected Products

Oracle Solaris

Solaris

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-34281 · Security Note
• https://oracle.com/security-alerts/cpuapr2026.html · Vendor Advisory
• https://twitter.com/CVEnew/status/2048546656749277258 · Twitter Post