CVE-2026-16607

HIGH8.5

Authenticated local root privilege escalation vulnerability in openFT for Linux and Oracle Solaris

Published Jul 22, 2026

Modified 1 months ago

Details

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.

References

WEB

https://global.fujitsu/de-de/capabilities/mainframe-solutions/bs2000-integration

ADVISORY

https://security.eu.fsastech.com/IndexDownload.asp?SoftwareGuid=20873292-0006-4a1c-a188-3940762a0075

ADVISORY

https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-FG-2026-042411-Security-Notice.pdf

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-16607

CVSS Analysis

CVSS v4.0

8.5