Live › vulnerability › CVE-2026-107898
Go to dashboardV-SFT, Fuji Electric's HMI editing software, has an out-of-bounds read in its data-check code that is triggered when it opens a crafted V7 file. An attacker who gets a user to open that file may read memory or execute arbitrary code on the affected machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 07:28 UTC. All times on this page are UTC.
Teams that use V-SFT to edit Fuji Electric HMI or PLC project files, especially on engineering workstations that open project files received from outside the plant. Sites that do not run V-SFT, or that only open trusted, internally created V7 files, are less exposed. The sources do not list the affected versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::MacroCommandCheck. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.
This page as .md · .json · in your agent: get_signal("CVE-2026-107898")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.