Oracle Solaris IPS Flaw Allows Unauthenticated Remote Takeover

Oracle Solaris contains a critical security flaw that allows unauthenticated attackers to take complete control of affected systems. The National Vulnerability Database records this issue as CVE-2026-60432, assigning it a maximum severity score.

The vulnerability exists within the Image Packaging System component of Oracle Systems products. According to the NVD record, an attacker with network access via HTTP can exploit this weakness easily. Successful exploitation results in the total compromise of the Oracle Solaris operating system.

Severity and Technical Details

The Common Vulnerability Scoring System version 3.1 assigns a base score of 9.8 to this vulnerability. This rating classifies the flaw as critical due to its high impact on confidentiality, integrity, and availability. The vector string indicates that the attack is network-based and requires low complexity.

No user interaction is necessary for the exploit to succeed. The attacker does not need prior authentication privileges to trigger the vulnerability. The ease of exploitation combined with the remote nature of the attack makes this a significant risk for exposed systems.

Affected Versions and Scope

Only specific supported versions of the software are affected by this issue. According to the NVD record, Oracle Solaris 11.3 and Oracle Solaris 11.4 are the impacted versions. Other versions of the operating system are not listed as vulnerable in this advisory.

The flaw is specific to the Image Packaging System component. This component is integral to the management of software packages on Solaris systems. Organizations running these two specific versions must treat the exposure as immediate and severe.

Security teams should monitor official channels from Oracle for updates regarding patches or mitigation guidance. The source material does not confirm the availability of a fix or update for this vulnerability at this time.

What should you do?

Security teams should immediately audit their environments to identify any instances of Oracle Solaris 11.3 or 11.4. If these versions are present, they should be isolated from untrusted networks to reduce exposure. Administrators must restrict HTTP access to the Image Packaging System services where possible.

Organizations should verify their current inventory against the affected versions listed in the NVD record. Monitoring for unusual network traffic targeting HTTP services on these systems can help detect potential exploitation attempts. Stay alert for official announcements from Oracle regarding remediation steps.

What to do and how to stay safe: Oracle Solaris

• Inventory all systems to confirm if Oracle Solaris 11.3 or 11.4 is installed.
• Restrict network access to the Image Packaging System HTTP services immediately.
• Monitor logs for unauthorized access attempts or anomalous HTTP traffic patterns.
• Await official vendor guidance before attempting unverified manual mitigations.

Step-by-step guide: Risk-Based Vulnerability Management: Prioritize Fixes by Actual Danger

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Which Oracle Solaris versions are affected by CVE-2026-60432?

Oracle Solaris 11.3 and 11.4 are the supported versions affected by this vulnerability.

What is the CVSS score for this vulnerability?

The CVSS 3.1 Base Score is 9.8, which is rated as critical severity.

Can an attacker exploit this flaw without authentication?

Yes, the vulnerability allows an unauthenticated attacker with network access to exploit it.