What is the severity of CVE-2026-21942?

CVE-2026-21942 has a CVSS v3 score of 5, which is classified as Medium severity.

Is there an exploit available for CVE-2026-21942?

No known public exploits are currently available for CVE-2026-21942.

Is there a patch available for CVE-2026-21942?

No official patches have been released yet for CVE-2026-21942. Consider implementing workarounds or mitigations.

CVE-2026-21942 - CVE Details, Severity, and Analysis

Severity Scores

CVSS v35.0

CVSS v20.0

Priority Score110.0

EPSS Score0.0

Medium

Exploitation LikelihoodMinimal

0.00%EPSS

Very low probability of exploitation

Monitor and patch as resources allow

0.00%

EPSS

5.0

CVSS

No

Exploit

No

Patch

Medium Priority

no patch

EPSS predicts the probability of exploitation in the next 30 days based on real-world threat data, complementing CVSS severity scores with actual risk assessment.

Description

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H).

CVSS v3 Breakdown

Attack Vector:Local

Attack Complexity:Local

Privileges Required:Local

User Interaction:Required

Scope:Unchanged

Confidentiality:Network

Integrity:Network

Availability:High