PT-2026-63423 · Fujitsu · Openft

CVE-2026-16606

·

Published

2026-07-22

·

Updated

2026-07-22

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Fujitsu Software Linux openFT versions prior to 12.1D00 Fujitsu Software Oracle Solaris openFT versions prior to 12.1D00
Description A flaw allows unauthenticated remote code execution (pre-auth RCE) on GNU/Linux or Oracle Solaris systems. Remote code execution is a type of attack where an attacker can execute arbitrary commands on a target machine over a network.
Recommendations Update Fujitsu Software Linux openFT to version 12.1D00 or later. Update Fujitsu Software Oracle Solaris openFT to version 12.1D00 or later.

Fix

RCE

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-16606

Affected Products

Openft