CVE-2026-16607

HIGH

Authenticated local root privilege escalation vulnerability in openFT for Linux and Oracle Solaris

Title source: cna
STIX 2.1

Description

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.

References (3)

Core 3

Scores

CVSS v3 7.8
EPSS 0.0010
EPSS Percentile 1.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-269
Status published
Products (4)
Fujitsu/Linux openFT < 12.1C96
Fujitsu/Linux openFT 12.1D00
Fujitsu/Oracle Solaris openFT < 12.1C95
Fujitsu/Oracle Solaris openFT 12.1D00
Published Jul 22, 2026
Tracked Since Jul 22, 2026