CVE-2026-107900: High severity Fuji Electric V-SFT vulnerability
Published Oct 26, 2026
·Updated
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!CCheck::ItemCheck. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.
Affected Software
1 affected component
Fuji Electric V-SFT
Event History
Oct 26, 2026
CVE Published
via MITRE·06:27 AM
Data Sourced
via MITRE·06:27 AM
DescriptionSeverity
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
An attacker needs to convince a user to open a crafted V7 file in the affected product. The CVSS vector indicates local attack access, no required privileges, and required user interaction.
2
What could exploitation allow?
Opening the crafted file may cause an out-of-bounds read in VS6ComFile!CCheck::ItemCheck. This may result in information exposure or arbitrary code execution, with impacts to confidentiality, integrity, and availability.