Critical severity9.8NVD Advisory· Published Jul 22, 2026· Updated Jul 22, 2026

CVE-2026-16606

Description

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution (pre-auth RCE) on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.

Affected products

Fujitsu/Linux openFTllm-fuzzy
Range: <12.1D00
Fujitsu/Oracle Solaris openFTllm-create
Range: <12.1D00

Patches

Vulnerability mechanics

References

global.fujitsu/de-de/capabilities/mainframe-solutions/bs2000-integrationnvd
security.eu.fsastech.com/IndexDownload.aspnvd
security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-FG-2026-042411-Security-Notice.pdfnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000