OOmniOS

Products

Exploited and recent CVEs

• CVE-2026-104115 Medium 5.4 Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemon 0.1%
• CVE-2026-104114 Medium 5.4 NULL pointer dereference in illumos nwamd door handler allows local users to crash the daemon 0.1%
• CVE-2026-104112 Medium 6.8 Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory 0.1%
• CVE-2026-104116 Low 1.9 Missing authorization in illumos zonestatd allows local users to disrupt zonestat and enumerate running zones 0.1%
• CVE-2026-104113 Medium 5.4 Double free in OmniOS and SmartOS ipmgmtd allows local users to crash the daemon 0.1%
• CVE-2026-104117 Low 1.9 Missing authorization in illumos ipmgmtd allows local users to change persistent IPMP group membership 0.1%
• CVE-2026-102916 Medium 6.8 Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host 0.1%
• CVE-2026-15422 Critical 9.1 SCTP needs to better-check INIT ACK chunk parameters 0.9%
• CVE-2026-15449 Medium 5.8 TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption 0.1%