CVE-2026-16607CWE-269

Authenticated local root privilege escalation vulnerability in openFT for Linux and Oracle Solaris

High · published July 22, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00147 · 3.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-07-22T15:07Z
EPSS history
Timeline
  • 22 JUL 15:07Z
    Authenticated local root privilege escalation vulnerability in openFT for Linux and Oracle Solaris
    cvelistv5