PT-2026-3680 · Oracle · Oracle Zfs Storage Appliance Kit

Published 2026-01-20 · Updated 2026-01-21 · CVE-2026-21930

Positive Technologies (AI Summary)

CVSS v3.1

2.3

Low

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Oracle ZFS Storage Appliance Kit version 8.8

Description An easily exploitable issue exists within the Filesystems component of the Oracle ZFS Storage Appliance Kit. A high-privileged attacker with access to the system where the kit executes can compromise the kit. Successful exploitation may lead to unauthorized modification, addition, or removal of data accessible by the Oracle ZFS Storage Appliance Kit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-00977

CVE-2026-21930

Affected Products

Oracle Zfs Storage Appliance Kit

References · 6

• https://oracle.com/security-alerts/cpujan2026.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00977 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-21930 · Security Note
• https://osv.dev/vulnerability/CVE-2026-21930 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB20260120197 · Note
• https://twitter.com/CVEnew/status/2013783026925535663 · Twitter Post