{"id":"CVE-2026-107895","kind":"vulnerability","aliases":["CVE-2026-107895"],"related":[],"title":"Fuji Electric V-SFT: crafted V7 file triggers out-of-bounds write","description":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.","summary":"V-SFT, Fuji Electric's HMI configuration software, has an out-of-bounds write flaw triggered when it opens a crafted V7 file. An attacker who gets a user to open such a file may expose information or run arbitrary code on the affected machine.","severity":"high","cvss":8.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["fuji-electric","hmi","industrial-control","infrastructure","v-sft","windows"],"not_affected_if":["no-v-sft-installed"],"how_to_check":"- Check the installed V-SFT version in the application's about or help dialog; the sources do not give the affected version range.\n- Identify whether V-SFT is installed on engineering workstations that open project files from outside sources.","fix":"- unknown: the sources do not name a fixed version or vendor patch; check the Fuji Electric advisory for the affected V-SFT release.","status":"open","published_at":"2026-10-26T07:17:07+00:00","first_seen_at":"2026-10-26T07:28:49+00:00","triaged_at":"2026-10-26T07:29:53+00:00","updated_at":"2026-10-26T07:29:53+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-26T07:29:53Z","model":"claude-haiku-5-5","output":{"fix":"- unknown: the sources do not name a fixed version or vendor patch; check the Fuji Electric advisory for the affected V-SFT release.","reach":"local","title":"Fuji Electric V-SFT: crafted V7 file triggers out-of-bounds write","impact":"high","summary":"V-SFT, Fuji Electric's HMI configuration software, has an out-of-bounds write flaw triggered when it opens a crafted V7 file. An attacker who gets a user to open such a file may expose information or run arbitrary code on the affected machine.","category":"infrastructure","nicknames":[],"who_cares":["v-sft","fuji-electric","hmi","industrial-control","windows"],"confidence":0.5,"needs_auth":"no","worst_case":"code runs on the engineering workstation when a crafted file opens","analyst_note":"Find the Fuji Electric advisory and the affected and fixed V-SFT versions; the NVD entry gives no version range or patch.","how_to_check":"- Check the installed V-SFT version in the application's about or help dialog; the sources do not give the affected version range.\n- Identify whether V-SFT is installed on engineering workstations that open project files from outside sources.","needs_analyst":true,"not_affected_if":["no-v-sft-installed"],"who_is_affected":"Teams that install V-SFT to build or edit HMI projects are exposed when they open V7 project files, especially files from third parties or untrusted sources. Systems that never run V-SFT, or that only run compiled projects on panels without the editor, are unlikely to be affected. The sources do not say which V-SFT versions are vulnerable.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000626,"input_tokens":3281,"output_tokens":595,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-107895':17A,20A '-2026':16A,19A 'affect':78B,113C 'arbitrari':74B,108C 'attack':59B 'bound':13A,47B,94C 'co':87C 'code':75B,109C 'configur':40B 'contain':89C 'control':27B 'craft':6A,55B,99C 'cve':15A,18A 'electr':2A,23B,37B,86C 'execut':110C 'expos':70B 'exposur':106C 'file':8A,57B,68B,101C 'flaw':49B 'fuji':1A,22B,36B,85C 'fuji-electr':21B 'get':61B 'hmi':24B,39B 'industri':26B 'industrial-control':25B 'inform':71B,105C 'infrastructur':28B 'lead':103C 'ltd':88C 'machin':79B 'may':69B,102C 'open':53B,65B,97C 'out-of-bound':10A,44B,91C 'product':114C 'provid':83C 'run':73B 'sft':5A,31B,35B,82C 'softwar':41B 'trigger':9A,50B 'user':63B 'v':4A,30B,34B,81C 'v-sft':3A,29B,33B,80C 'v7':7A,56B,100C 'vulner':96C 'window':32B 'write':14A,48B,95C","nicknames":[],"mitigations":[],"who_affected":"Teams that install V-SFT to build or edit HMI projects are exposed when they open V7 project files, especially files from third parties or untrusted sources. Systems that never run V-SFT, or that only run compiled projects on panels without the editor, are unlikely to be affected. The sources do not say which V-SFT versions are vulnerable.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T07:17:07+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"vultures@jpcert.or.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107895","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107895","severity":null,"published_at":"2026-10-26T07:17:07+00:00","modified_at":"2026-10-26T07:17:07+00:00","first_seen_at":"2026-10-26T07:28:49+00:00","fetched_at":"2026-10-26T07:28:49+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}