Fuji Electric V-SFT: Out-of-bounds read when opening crafted V7 files

Summary

V-SFT from Fuji Electric and Hakko Electronics contains an out-of-bounds read (CWE-125) in the macro command check of VS6EditData. Opening a specially crafted V7 file can expose information or allow arbitrary code execution on the affected system. The attack requires a user to open the malicious file on a system with V-SFT installed, and the CVSS 4.0 score is 8.4 (High).

Affected

• V-SFT versions 0 to 6.2.11.0 (according to the CVE record and JVN)

Fixed in

• V-SFT-6 Ver. 6.2.12.0, per the vendor's improvement information No. 26A0H18. The vendor page excerpt does not explicitly map this CVE to that version, so verify this on the vendor page.

Workaround

• No vendor workaround known.
• Do not open V7 files from untrusted or unknown sources.

Exploitation

• CISA SSVC: exploitation none, not automatable.
• Not listed in CISA KEV.
• No public proof of concept found; status treated as unknown.

Our recommendation

• Inventory all V-SFT installations and record their versions.
• Update V-SFT to version 6.2.12.0 or later, following the vendor's instructions.
• Until patched, accept V7 project files only from known suppliers and check them before opening.
• Restrict V-SFT engineering PCs from general office use and the internet, and limit USB and removable media.
• Monitor the vendor and JVN advisories for updates.

Public exploits iAttack code is publicly available (PoC on GitHub, Metasploit or Exploit-DB).

PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.

Research sources

• Fuji Electric: Improvement information V-SFT-6 Ver. V6.2.12.0 felib.fujielectric.co.jp
• JVN: JVNVU#96549652 Multiple vulnerabilities in FUJI ELECTRIC V-SFT jvn.jp
• OpenCVE: CVE-2026-107898 app.opencve.io
• VulDB: Entry 426325 vuldb.com

Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 12:05.