PT-2026-3692 · Oracle · Oracle Sun Solaris 10+1

Published 2026-01-20 · Updated 2026-01-21 · CVE-2026-21942

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 10 and 11

Description An easily exploitable issue exists in the Filesystems component of Oracle Solaris. A low-privileged attacker with access to the system can cause a denial-of-service (complete hang or frequent crash) condition. Successful exploitation requires interaction from another person.

Recommendations Update Oracle Solaris version 10. Update Oracle Solaris version 11.

Fix

Resource Exhaustion

RCE

Weakness Enumeration

CWE-400

CWE-20

Related Identifiers

BDU:2026-00825

CVE-2026-21942

Affected Products

Oracle Sun Solaris 10

Oracle Solaris 11

References · 6

• https://oracle.com/security-alerts/cpujan2026.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21942 · Security Note
• https://osv.dev/vulnerability/CVE-2026-21942 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00825 · Security Note
• https://cybersecurity-help.cz/vdb/SB20260120201 · Note
• https://twitter.com/CVEnew/status/2013783014900437277 · Twitter Post