CVE-2026-21930: oracle corporation oracle zfs storage appliance kit
Vulnerability summary
CVE-2026-21930 is a low (CVSS 2.3) vulnerability in oracle corporation oracle zfs storage appliance kit. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 4.2% of scored vulnerabilities.
Timeline
- 20-01-2026PublishedVulnerability first disclosed.
- 21-01-2026Last modifiedVulnerability information updated.
Description
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Filesystems). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 2.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST2.3LowCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
EPSS trend
Probability
0.15%
Chance of exploitation in the next 30 days
Percentile
4%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.15% on 22-09-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Oracle1 product
Oracle corporation1 product
2 vendors · 2 products
References
1 links- www.oracle.com/security-alerts/cpujan2026.htmlVendor Advisory