Out-of-Bounds Read Vulnerability in V-SFT by FUJI ELECTRIC CO., LTD.
CVE-2026-107900

8.4HIGH

Key Information:

Vendor

Fuji Electric Co., Ltd. / Hakko Electronics Co., Ltd.

Status
V-sft
Vendor
CVE Published:
26 October 2026

What is CVE-2026-107900?

V-SFT by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in the VS6ComFile!CCheck::ItemCheck function. When a maliciously crafted V7 file is opened, it could lead to potential information exposure or even permit arbitrary code execution on the affected systems. This vulnerability underscores the importance of addressing software risks to maintain the integrity and security of sensitive data.

Affected Version(s)

V-SFT 0 <= 6.2.11.0

References

https://felib.fujielectric.co.jp/en/M10010/M20060/documen...
https://jvn.jp/en/vu/JVNVU96549652/

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.