Search

Multiple Vulnerabilities in Oracle Solaris and Sun ZFS Storage Allow Remote Code Execution

CERT-FR published advisory CERTFR-2026-AVI-0471 on 22 April 2026 disclosing multiple vulnerabilities in Oracle Systems products. The affected systems are Oracle Solaris version 11.4 and Sun ZFS Storage Appliance Kit version 8.8. The vulnerabilities enable remote arbitrary code execution and denial of service attacks. Organizations running these Oracle products should refer to Oracle's Critical Patch Update cpuapr2026 (published 21 April 2026) for available patches and remediation guidance.