PT-2026-63424 · Fujitsu · Linux Openft+1

CVE-2026-16607 · Published 2026-07-22 · Updated 2026-07-22

NVD

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-16607

Affected Products

Linux Openft

Oracle Solaris Openft

References · 4

• https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-FG-2026-042411-Security-Notice.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-16607 · Security Note
• https://security.eu.fsastech.com/IndexDownload.asp?SoftwareGuid=20873292-0006-4a1c-a188-3940762a0075 · Vendor Advisory
• https://global.fujitsu/de-de/capabilities/mainframe-solutions/bs2000-integration · Note