CVE-2026-16606
Critical
Description
A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution (pre-auth RCE) on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.
SeverityCritical
CVSS9.8
Exploit probability—
ProductLinux openFT
PublishedJul 22, 2026
First seenJul 22, 2026
Weakness typeCWE-94Code injection
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Fujitsu Linux openFT | v ≤ 12.1C96 | — |
| Fujitsu Oracle Solaris openFT | v ≤ 12.1C95 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.