9.8Kritik
CVE-2026-16606Unauthenticated remote code execution (pre-auth RCE) vulnerability in openFT for Linux and Oracle Solaris
Açıklama
A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution (pre-auth RCE) on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.
Zayıflık türü (CWE):
CWE-94
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Fujitsu | Linux openFT | fixed 12.1D00, ≤ 12.1C96 | |
| Fujitsu | Oracle Solaris openFT | fixed 12.1D00, ≤ 12.1C95 |
Kaynaklar ve yamalar
- https://security.eu.fsastech.com/IndexDownload.asp?SoftwareGuid=20873292-0006-4a1c-a188-3940762a0075 vendor-advisory
- https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-FG-2026-042411-Security-Notice.pdf vendor-advisory
- https://global.fujitsu/de-de/capabilities/mainframe-solutions/bs2000-integration mitigation