{"id":"CVE-2026-107894","title":"V-SFT provided by FUJI ELECTRIC CO., LTD","summary":"V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-121"],"vendor":"FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd.","product":"V-SFT","affected":["V-SFT <= 6.2.11.0"],"published":"2026-10-26","updated":"2026-10-26","sourceUpdated":"2026-10-26T06:26:10.199Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-107894","references":[{"url":"https://felib.fujielectric.co.jp/en/M10010/M20060/document_detail/5d9dd71d-9494-41a4-aa5c-8e6b8b21066b?region=en-glb"},{"url":"https://jvn.jp/en/vu/JVNVU96549652/"}],"tags":["cve.org"],"ingestedAt":"2026-10-26T07:20:03.481Z","slug":"CVE-2026-107894","body":"## Overview\n\nV-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.\n\n## Affected\n\n- `V-SFT <= 6.2.11.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}