CVE-2026-16607

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.

Score

CVSS 4.0 8.5 High

Status

Deferred - 763b0cbd-1a52-41de-b280-f255286be201

Published

2026-07-22

Last modified

2026-07-22

Weaknesses

CWE-269

Affected products

• Linux Openft (Fujitsu)
• Oracle Solaris Openft (Fujitsu)

References

• https://global.fujitsu/de-de/capabilities/mainframe-solutions/bs2000-integration
• https://security.eu.fsastech.com/IndexDownload.asp?SoftwareGuid=20873292-0006-4a1c-a188-3940762a0075
• https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-FG-2026-042411-Security-Notice.pdf