CVE-2026-107896: High severity Fuji Electric V-SFT vulnerability
Published Oct 26, 2026
·Updated
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!loadgritem. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.
Affected Software
1 affected component
Fuji Electric V-SFT
Event History
Oct 26, 2026
CVE Published
via MITRE·06:26 AM
Data Sourced
via MITRE·06:26 AM
DescriptionSeverity
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
An attacker must persuade a user to open a crafted V7 file in the affected V-SFT product. The CVSS vector indicates local access and user interaction are required, while no privileges are required.
2
What is the potential impact if exploitation succeeds?
Successful exploitation may expose information or allow arbitrary code execution on the affected product. The vulnerability is an out-of-bounds read in VS6ComFile!load_gr_item.