CVE-2026-107897: High severity Fuji Electric V-SFT vulnerability
Published Oct 26, 2026
·Updated
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6MemInIF!settemptypedefault. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.
Affected Software
1 affected component
Fuji Electric V-SFT
Event History
Oct 26, 2026
CVE Published
via MITRE·06:26 AM
Data Sourced
via MITRE·06:26 AM
DescriptionSeverity
Frequently Asked Questions
1
What does an attacker need to do to exploit this issue?
The attacker must cause a user to open a crafted V7 file in the affected product. The vulnerability is locally exploitable and requires user interaction; no privileges are required.
2
What could happen if a crafted file is opened?
Opening the crafted V7 file may cause information exposure or arbitrary code execution. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability.