CVEsFUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.CVE-2026-107896Published Oct 26, 06:26 · Updated Oct 26, 14:35 UTC
7.8
HighCVSS 3.1 · from jpcert
CVE-2026-107896
V-SFT provided by FUJI ELECTRIC CO., LTD.
V-SFT · Out-of-bounds read · CWE-125AffectedV-SFT
FixNo fix listed yet.
PublishedOct 26, 06:26 · jpcert
ScoredOct 26 · 7.8 · jpcert
Exploit code publicNone known · checked 22:18 UTC
ExploitedNone known · CISA KEV checked 22:30 UTC
What we know
No known exploitation. CISA KEV, checked 22:30 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 22:18 UTC.
An attacker needs local access to the machine. CVSS: local.
Someone has to open, click or run something first. CVSS: user interaction required.
A successful attack can read and change data and take the service down. CVSS: high impact on confidentiality, integrity and availability.
A successful attack gives full control of the affected system. CISA: technical impact total.
Description
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!load_gr_item. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.
From jpcert
Affected and fixed versions
ProductAffectedFixed inV-SFTup to 6.2.11.0–
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known