PT-2026-63423 · Fujitsu · Linux Openft+1

CVE-2026-16606 · Publicado 2026-07-22 · Atualizado 2026-07-22

NVD

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution (pre-auth RCE) on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2026-16606

Produtos afetados

Linux Openft

Oracle Solaris Openft

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-16606 · Nota de Segurança
• https://global.fujitsu/de-de/capabilities/mainframe-solutions/bs2000-integration · Nota
• https://security.eu.fsastech.com/IndexDownload.asp?SoftwareGuid=20873292-0006-4a1c-a188-3940762a0075 · Aviso do Fabricante
• https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-FG-2026-042411-Security-Notice.pdf · Aviso do Fabricante