[NEW] [medium] Oracle Solaris: Multiple vulnerabilities

mediumCVE-2026-60659 CVE-2026-60661 CVE-2026-60833 CVE-2026-60834 CVE-2026-61052 CVE-2026-61202

A remote, authenticated attacker can exploit multiple vulnerabilities in Oracle Solaris to compromise confidentiality, integrity, and availability.

CSIRTS triage

vendor: Oracle product: SolarisOther

What: Multiple vulnerabilities can be exploited by remote, authenticated attackers to compromise confidentiality, integrity, and availability.
Who is affected: Authenticated users of Oracle Solaris.
Urgency: Remediation is medium urgency as the vulnerabilities are not currently exploited.
Action: Apply available patches to mitigate the vulnerabilities.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Solaris

Get an email when a new Solaris advisory drops — max one per day, one-click unsubscribe.

Details

Source: CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity: medium
Published: 2026-07-22
Exploitation: Not in CISA KEV at last sync
Language: Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2449

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-606590.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all scored CVEs.
Low exploitation riskCVE-2026-606610.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all scored CVEs.
Low exploitation riskCVE-2026-608330.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all scored CVEs.
Low exploitation riskCVE-2026-608340.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all scored CVEs.
Low exploitation riskCVE-2026-610520.14% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 4% of all scored CVEs.
Low exploitation riskCVE-2026-612020.10% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-60659	coverage & exploitation status	NVD · CVE.org
CVE-2026-60661	coverage & exploitation status	NVD · CVE.org
CVE-2026-60833	coverage & exploitation status	NVD · CVE.org
CVE-2026-60834	coverage & exploitation status	NVD · CVE.org
CVE-2026-61052	coverage & exploitation status	NVD · CVE.org
CVE-2026-61202	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for Oracle Solaris

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

high[NEW] [high] Oracle Solaris third-party components: Multiple vulnerabilitiescert-bund · 2026-07-28
highCVE-2026-16607: A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT be…nvd · 2026-07-22
criticalCVE-2026-16606: A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT be…nvd · 2026-07-22
highCVE-2026-61202: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported …nvd · 2026-07-21
mediumCVE-2026-61052: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The su…nvd · 2026-07-21
highCVE-2026-60834: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The suppor…nvd · 2026-07-21