Read the docs
TI-2026-13858 Aliases CVE-2026-16607GHSA-rr2p-3q6v-qr2f

Authenticated local root privilege escalation vulnerability in openFT for Linux and Oracle Solaris

Priority LOW 38CWE-269Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-269.

Summary

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00147 3rd percentileScored 2026-11-07
Fix Fixed Linux openFT (Fujitsu): 12.1D00Oracle Solaris openFT (Fujitsu): 12.1D00

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
FujitsuLinux openFTup to 12.1C9612.1D00Patch availableCNA
FujitsuOracle Solaris openFTup to 12.1C9512.1D00Patch availableCNA
  • Linux openFT VendorFujitsu Affected up to 12.1C96 Fixed in 12.1D00 Patch available CNA
  • Oracle Solaris openFT VendorFujitsu Affected up to 12.1C95 Fixed in 12.1D00 Patch available CNA

Remediation

  • Fix · CNA Linux openFT (Fujitsu) Fixed in 12.1D00
  • Fix · CNA Oracle Solaris openFT (Fujitsu) Fixed in 12.1D00

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Fujitsu Linux openFT, Oracle Solaris openFT — security.eu.fsastech.com/IndexDownload.asp?SoftwareGuid=208…

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2026-13857 Unauthenticated remote code execution (pre-auth RCE) vulnerability in openFT for Linux and Oracle SolarisPriority MEDIUM 50
    Show all 2 records → Advisory →
  • Advisory ·

    Fujitsu Linux openFT, Oracle Solaris openFT — security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PS…

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2026-13857 Unauthenticated remote code execution (pre-auth RCE) vulnerability in openFT for Linux and Oracle SolarisPriority MEDIUM 50
    Show all 2 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-16607
  2. 2026-10-03 Alias added: GHSA-rr2p-3q6v-qr2f

References

Advisory 2

Other 1

  • TI-2013-02013 Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL… KEVCVSS 3.1CRITICAL 9.8
  • TI-2020-06702 Uncontrolled recursion in https://github.com/curl/curl CVSS 3.1HIGH 7.5
  • TI-2021-06204 Integer overflow in CipherUpdate CVSS 3.1HIGH 7.5
  • TI-2013-02271 The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte… CVSS 3.1MEDIUM 5.9
  • TI-2024-07516 Insecure Platform Key (PK) used in UEFI system firmware signature CVSS 3.1MEDIUM 6.4
  • TI-2019-04327 An issue was discovered in OpenSSH 7.9. CVSS 3.1MEDIUM 5.9
See all 84 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences