Live › vulnerability › CVE-2026-107895
Go to dashboardV-SFT, Fuji Electric's HMI configuration software, has an out-of-bounds write flaw triggered when it opens a crafted V7 file. An attacker who gets a user to open such a file may expose information or run arbitrary code on the affected machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 07:28 UTC. All times on this page are UTC.
Teams that install V-SFT to build or edit HMI projects are exposed when they open V7 project files, especially files from third parties or untrusted sources. Systems that never run V-SFT, or that only run compiled projects on panels without the editor, are unlikely to be affected. The sources do not say which V-SFT versions are vulnerable.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.
This page as .md · .json · in your agent: get_signal("CVE-2026-107895")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.