CVE-2026-16606 Fujitsu CVE debrief

Who should care

Users of Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 should apply the necessary patches to prevent unauthenticated remote code execution. This includes operators, platform administrators, vulnerability management teams, and security teams responsible for these systems.

Technical summary

CVE-2026-16606 is caused by a weakness in the handling of certain requests in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00. This allows an attacker to execute arbitrary code remotely without authentication. The vulnerability affects GNU/Linux and Oracle Solaris systems. Defenders should focus on applying patches and restricting access to affected systems.

Defensive priority

High

Recommended defensive actions

• Apply the necessary patches to Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT
• Restrict access to the affected systems
• Monitor for suspicious activity
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The Fsas Technologies PSIRT obtained the intelligence internally and covers the CVE beyond its CNA scope under an existing agreement with Fujitsu Germany. The vulnerability affects GNU/Linux and Oracle Solaris systems running Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00. Defenders should verify system configurations, review logs for suspicious activity, and ensure patches are applied according to vendor guidance.

Official resources