Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-16606

Unauthenticated remote code execution (pre-auth RCE) vulnerability in openFT for Linux and Oracle Solaris

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
FTI

Description

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution (pre-auth RCE) on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fujitsu Linux openFT

Default version status: affected

  • 12.1D00unaffected
  • 0 to ≤ 12.1C96affected

Fujitsu Oracle Solaris openFT

Default version status: affected

  • 12.1D00unaffected
  • 0 to ≤ 12.1C95affected

References