CVE-2026-16606
A flaw in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 lets anyone on the network run arbitrary code on the affected system without needing to log in. The vulnerability is exploitable remotely and can be triggered by a simple network request.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT versions earlier than 12.1D00. The typical users are system administrators who run these products on Linux or Solaris servers.
Real-world impact
An attacker who exploits this flaw can execute any code they choose on the vulnerable machine, giving them full control over the system, including data theft, sabotage, or further network compromise.
Why this severity
The CVSS score of 9.3 reflects that the flaw is remotely exploitable with no authentication, and it can compromise confidentiality, integrity, and availability of the affected systems. The high impact and ease of exploitation make it a critical risk.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources