CVE-2026-91242 – Oracle Solaris vulnerability
A CWE-284 improper access control vulnerability affects the Plugins component of Oracle Solaris 11.4. The vulnerability is easily exploitable by a high-privileged attacker with logon to the infrastructure where Oracle Solaris executes, but successful attacks require human interaction by someone other than the attacker. The CVSS 3.1 base score is 7.4.
CERT24