Live › vulnerability › CVE-2026-107897
Go to dashboardV-SFT, Fuji Electric's HMI configuration software, has an out-of-bounds read in its VS6MemInIF set_temp_type_default routine. Opening a crafted V7 file may expose information or let an attacker run arbitrary code on the affected product.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 07:28 UTC. All times on this page are UTC.
Teams that open V-SFT project files, including files received from outside their organization, on engineering workstations are exposed to a crafted V7 file. The sources do not list affected V-SFT versions or say whether the runtime HMI is also at risk. Teams that never open untrusted V7 files are unlikely to be affected, but the sources do not confirm this.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.
This page as .md · .json · in your agent: get_signal("CVE-2026-107897")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.