7.8Alta
CVE-2026-16607Authenticated local root privilege escalation vulnerability in openFT for Linux and Oracle Solaris
Descripción
A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.
Debilidad (CWE):
CWE-269
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Fujitsu | Linux openFT | fixed 12.1D00, ≤ 12.1C96 | |
| Fujitsu | Oracle Solaris openFT | fixed 12.1D00, ≤ 12.1C95 |
Referencias y parches
- https://security.eu.fsastech.com/IndexDownload.asp?SoftwareGuid=20873292-0006-4a1c-a188-3940762a0075 vendor-advisory
- https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-FG-2026-042411-Security-Notice.pdf vendor-advisory
- https://global.fujitsu/de-de/capabilities/mainframe-solutions/bs2000-integration mitigation