CVE-2026-107898: High severity Fuji Electric V-SFT vulnerability
Published Oct 26, 2026
·Updated
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::MacroCommandCheck. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.
Affected Software
1 affected component
Fuji Electric V-SFT
Event History
Oct 26, 2026
CVE Published
via MITRE·06:26 AM
Data Sourced
via MITRE·06:26 AM
DescriptionSeverity
Frequently Asked Questions
1
Who is exposed to this vulnerability?
Users of Fuji Electric V-SFT are exposed when they open a crafted V7 file. Exploitation requires local access and user interaction, as indicated by the AV:L and UI:R vector components.
2
What could successful exploitation allow?
A crafted V7 file can trigger an out-of-bounds read in VS6EditData!CDataRomErrorCheck::MacroCommandCheck. The reported impacts are information exposure or arbitrary code execution, with high confidentiality, integrity, and availability impact.