CVE-2026-60432

Summary

This vulnerability allows unauthenticated attackers to completely compromise Oracle Solaris systems through the Image Packaging System component, affecting versions 11.3 and 11.4. The flaw enables full system takeover with high impact on confidentiality, integrity, and availability.

Exploitability

The vulnerability is easily exploitable with no authentication required, allowing attackers to access vulnerable Oracle Solaris systems via HTTP network connections.

Blast radius

If exploited, this vulnerability could lead to complete compromise of affected Oracle Solaris servers, potentially affecting critical enterprise infrastructure and data systems.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the latest Oracle Critical Patch Update (CPU) for Oracle Solaris 11.3 and 11.4, or upgrade to Oracle Solaris 11.5 or later versions which contain the fix for this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.