Which versions of Fujitsu openFT are affected by EUVD-2026-47727?

Fujitsu openFT file transfer systems running versions before 12.1D00 are vulnerable to privilege escalation attacks by any authenticated local user, potentially exposing organizational data and…

How to fix or mitigate EUVD-2026-47727?

Within 24 hours, identify all Fujitsu openFT instances across your environment and document which are running vulnerable versions (before 12.1D00). Within 7 days, implement access restrictions on affected systems-reduce local user accounts to only those strictly necessary, enforce multi-factor authentication for critical systems, and contact Fujitsu PSIRT to establish patch availability timeline. Within 30 days, prepare deployment procedures and apply version 12.1D00 or later as soon as patches become available; audit system logs during this interim period for any suspicious privilege escalation attempts.

Fujitsu openFT EUVD-2026-47727

Q: What is the CVSS score of EUVD-2026-47727?

EUVD-2026-47727 has a CVSS 4.0 base score of 8.5 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2026-16607 HIGH

Improper Privilege Management (CWE-269)

2026-07-22 FTI

GHSA-rr2p-3q6v-qr2f

Privilege Escalation Oracle Linux Openft Oracle Solaris Openft Fujitsu

8.5

CVSS 4.0 · Vendor: FTI

Severity by source

Vendor (FTI) PRIMARY

8.5 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.8 HIGH

Local escalation by an already-authenticated low-privileged user (AV:L, PR:L) with low complexity and no interaction, yielding full root-level C/I/A impact with no scope change.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (FTI).

CVSS VectorVendor: FTI

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 15:45 vuln.today

CVE Published

Jul 22, 2026 - 15:07 cve.org

HIGH 8.5

DescriptionCVE.org

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE beyond its CNA scope under existing agreement with Fujitsu Germany.

AnalysisAI

Local privilege escalation in Fujitsu openFT (managed file transfer) on GNU/Linux and Oracle Solaris allows an already-authenticated local user to gain root privileges on versions before 12.1D00. The flaw stems from improper privilege management (CWE-269) and carries a CVSS 4.0 base score of 8.5 (High). No public exploit identified at time of analysis; the intelligence was obtained internally by the Fsas Technologies PSIRT rather than from public disclosure.

Technical ContextAI

openFT is Fujitsu's enterprise managed file transfer product, historically tied to mainframe/BS2000 integration and deployed on both GNU/Linux and Oracle Solaris hosts. The root cause is classified as CWE-269 (Improper Privilege Management), meaning a privileged component or process does not correctly enforce the boundary between the invoking user's rights and the elevated (root) context in which openFT operates - typically a setuid/setgid binary, a privileged daemon, or an IPC/service pathway that trusts input from lower-privileged local users. The CPE data confirms two affected packages: cpe:2.3:a:fujitsu:linux_openft (Linux build) and cpe:2.3:a:fujitsu:oracle solaris_openft (Solaris build), indicating the defect is in shared product logic present on both platforms rather than an OS-specific packaging bug.

RemediationAI

Upgrade openFT to version 12.1D00 or later on both GNU/Linux and Oracle Solaris installations - this is the vendor-released fixed version and the primary remediation. Consult the Fsas Technologies PSIRT security notice (https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-FG-2026-042411-Security-Notice.pdf) and the download portal (https://security.eu.fsastech.com/IndexDownload.asp?SoftwareGuid=20873292-0006-4a1c-a188-3940762a0075) for platform-specific packages. Because exploitation requires an authenticated local account, effective compensating controls until patching include restricting interactive/shell access on hosts running openFT to trusted administrators only, auditing and minimizing the set of local user accounts on those servers, and monitoring for anomalous privilege transitions or unexpected execution of openFT setuid components; the trade-off is that these controls reduce opportunity but do not remove the underlying escalation path, so patching should not be deferred on shared or multi-user systems.