Login Request a demo
OM
Product
OmniOS
by OmniOS · last CVE Oct 9, 2026
9
CVEs
0
On KEV
9.1
Max CVSS
7
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 0Medium 6Low 2
Severity
All severities9Critical1High0Medium6Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add OmniOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-15422
9.1
1%
Jul 16
SCTP needs to better-check INIT ACK chunk parameters
Affected: r151058 before r151058j; r151056 before r151056aj; r151054 before r151054bj; any before r151054
CVE-2026-104112
6.8
0%
Oct 9
Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory
Affected: any before r151054; r151058 before r151058w; r151056 before r151056aw; r151054 before r151054bw
CVE-2026-102916
6.8
0%
Oct 9
Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host
Affected: any before r151054; r151058 before r151058w; r151056 before r151056aw; r151054 before r151054bw
CVE-2026-15449
5.8
0%
Jul 16
TOCTOU double copyin in illumos dld ioctl handling causes kernel heap corruption
Affected: any before r151054; r151058 before r151058j; r151056 before r151056aj; r151054 before r151054bj
CVE-2026-104115
5.4
0%
Oct 9
Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemon
Affected: any before r151054; r151058 before r151058w; r151056 before r151056aw; r151054 before r151054bw
CVE-2026-104114
5.4
0%
Oct 9
NULL pointer dereference in illumos nwamd door handler allows local users to crash the daemon
Affected: any before r151054; r151058 before r151058w; r151056 before r151056aw; r151054 before r151054bw
CVE-2026-104113
5.4
0%
Oct 9
Double free in OmniOS and SmartOS ipmgmtd allows local users to crash the daemon
Affected: r151020 before r151054; r151058 before r151058w; r151056 before r151056aw; r151054 before r151054bw
CVE-2026-104116
1.9
0%
Oct 9
Missing authorization in illumos zonestatd allows local users to disrupt zonestat and enumerate running zones
Affected: any before r151054; r151058 before r151058w; r151056 before r151056aw; r151054 before r151054bw
CVE-2026-104117
1.9
0%
Oct 9
Missing authorization in illumos ipmgmtd allows local users to change persistent IPMP group membership
Affected: r151042 before r151054; r151058 before r151058w; r151056 before r151056aw; r151054 before r151054bw
Showing 9