/
← Voltar ao feed
high

CERT-FR: Multiple vulnerabilities in Oracle Solaris and ZFS Storage Appliance Kit fixed in Oracle CPU October 2026

1 fonte(s) · 1 atualização(ões) · publicado 20/10/2026 21:00 · coletado há 6 horas

CERT-FR published advisory CERTFR-2026-AVI-1353 on 21 October 2026. It covers multiple vulnerabilities in Oracle Systems products, fixed in the Oracle Critical Patch Update cpuoct2026 of 20 October 2026. Affected products are Oracle Solaris 11.3 and 11.4 and Oracle ZFS Storage Appliance Kit 8.8. According to CERT-FR, exploitation could allow remote arbitrary code execution, remote denial of service, loss of data confidentiality and integrity, and security policy bypass. The advisory does not mention active exploitation.

Entenda a falha

A vulnerabilidade

CERT-FR advisory CERTFR-2026-AVI-1353 covers 28 CVEs in Oracle Systems products, fixed in Oracle's Critical Patch Update cpuoct2026 of 20 October 2026. Affected are Oracle Solaris 11.3 and 11.4 and Oracle ZFS Storage Appliance Kit 8.8. CERT-FR says the flaws allow remote arbitrary code execution, remote denial of service, loss of data confidentiality and integrity, and security policy bypass. The advisory gives no per-CVE description, CVSS score, affected component, attacker prerequisites or fixed version numbers, and does not mention active exploitation. Patches are in the Oracle bulletin.

Como foi descoberta

The CERT-FR advisory only says that multiple vulnerabilities were discovered in Oracle Systems and points to the vendor bulletin cpuoct2026 of 20 October 2026 for fixes; CERT-FR published its advisory on 21 October 2026. It does not say who found the flaws or how they were reported, and it does not mention active exploitation.

Explicação gerada por IA a partir da matéria e dos artigos, em 23/10/2026 12:18.

Detalhes técnicos

  • The advisory lists 28 CVE identifiers but gives no per-CVE description, CVSS score or affected component.
  • Impact categories named: remote code execution, remote denial of service, confidentiality and integrity impact, and security policy bypass.

Remediação

Linha do tempo

  1. cert.ssi.gouv.fr ↗ · pub. 20/10/2026 21:00 · coletado 23/10 12:01 primeiro registro

    CERT-FR: Multiple vulnerabilities in Oracle Solaris and ZFS Storage Appliance Kit fixed in Oracle CPU October 2026

    ler a análise desta fonte

    CERT-FR published advisory CERTFR-2026-AVI-1353 on 21 October 2026. It covers multiple vulnerabilities in Oracle Systems products, fixed in the Oracle Critical Patch Update cpuoct2026 of 20 October 2026. Affected products are Oracle Solaris 11.3 and 11.4 and Oracle ZFS Storage Appliance Kit 8.8. According to CERT-FR, exploitation could allow remote arbitrary code execution, remote denial of service, loss of data confidentiality and integrity, and security policy bypass. The advisory does not mention active exploitation.

    Technical Details

    • The advisory lists 28 CVE identifiers but gives no per-CVE description, CVSS score or affected component.
    • Impact categories named: remote code execution, remote denial of service, confidentiality and integrity impact, and security policy bypass.

    Remediation