CVE-2026-107899: High severity Fuji Electric V-SFT vulnerability
Published Oct 26, 2026
·Updated
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::CheckSymbolMacroParam. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.
Affected Software
1 affected component
Fuji Electric V-SFT
Event History
Oct 26, 2026
CVE Published
via MITRE·06:27 AM
Data Sourced
via MITRE·06:27 AM
DescriptionSeverity
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
An attacker needs to persuade a user to open a crafted V7 file in V-SFT. The vulnerability has no required privileges, but user interaction is required.
2
Who is exposed?
Users of Fuji Electric V-SFT who open V7 files from untrusted or attacker-controlled sources are exposed. Successful exploitation may disclose information or enable arbitrary code execution.
3
What should be done while a fix is not available?
Do not open V7 files from untrusted sources. Treat externally supplied or unexpected V7 files as potentially malicious until they can be verified.