CVE-2026-16606

openFT is the server software that helps systems exchange files. This vulnerability is like leaving a front door unlocked—an attacker can reach the server over the network and run their own code without logging in. If they succeed, they could take over the machine or disrupt your file services.

This matters if you run Fujitsu Software openFT on Linux or Oracle Solaris and your openFT server can be reached from a network connection (for example, from the internet or other untrusted networks). The key risk is that the attack does not require authentication and needs no user action. If your openFT service is not network-reachable in practice, the exposure may be lower, but reachability from the network is the deciding factor.

This is urgent because the vulnerability allows remote code execution without authentication—attackers don’t need valid logins or special user interaction. Even though there’s no KEV listing or public exploit code recorded in the findings, you should still treat it as a high-risk patching issue given the potential impact of a successful attack. Verdict: AMBER.