Live › vulnerability › CVE-2026-107900
Go to dashboardV-SFT, Fuji Electric's industrial HMI engineering software, has an out-of-bounds read in its VS6ComFile component when it opens a crafted V7 file. An attacker who gets a user to open such a file may read memory and could run arbitrary code on the affected product.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 07:28 UTC. All times on this page are UTC.
Teams that run Fuji Electric V-SFT for industrial HMI programming are affected when they open V7 project files from untrusted sources. Sites that never open files from outside sources have less exposure. The sources do not give affected versions.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!CCheck::ItemCheck. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.
This page as .md · .json · in your agent: get_signal("CVE-2026-107900")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.