<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:webfeeds="http://webfeeds.org/rss/1.0"><channel><title>Cpe:2.3:a:fujielectric:v-Sft:*:*:*:*:*:*:*:* - CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/cpes/cpe2.3afujielectricv-sft/</link><description>Trending threats, MITRE ATT&amp;CK coverage, and detection metadata. Fed continuously.</description><generator>Hugo</generator><language>en</language><managingEditor>hello@craftedsignal.io</managingEditor><webMaster>hello@craftedsignal.io</webMaster><lastBuildDate>Mon, 26 Oct 2026 07:37:18 +0000</lastBuildDate><atom:link href="https://feed.craftedsignal.io/cpes/cpe2.3afujielectricv-sft/feed.xml" rel="self" type="application/rss+xml"/><image><url>https://feed.craftedsignal.io/favicon-32x32.png</url><title>CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/</link><width>32</width><height>32</height></image><webfeeds:icon>https://feed.craftedsignal.io/favicon.svg</webfeeds:icon><item><title>Fuji Electric V-SFT: Stack-based buffer overflow (CVE-2026-107894)</title><link>https://feed.craftedsignal.io/briefs/2026-10-fuji-v-sft-overflow/</link><pubDate>Mon, 26 Oct 2026 07:37:18 +0000</pubDate><author>hello@craftedsignal.io</author><guid isPermaLink="true">https://feed.craftedsignal.io/briefs/2026-10-fuji-v-sft-overflow/</guid><description>Fuji Electric V-SFT is vulnerable to a stack-based buffer overflow during the parsing of crafted V7 files, potentially enabling arbitrary code execution.</description><content:encoded><![CDATA[<p>Fuji Electric V-SFT contains a stack-based buffer overflow vulnerability identified as CVE-2026-107894. This vulnerability is triggered when the application parses a specially crafted V7 file. Successful exploitation may result in information exposure or arbitrary code execution within the context of the application.</p>
<h2 id="impact">Impact</h2>
<p>Successful exploitation could lead to arbitrary code execution or unauthorized information disclosure.</p>
<h2 id="recommendation">Recommendation</h2>
<ul>
<li>Identify all instances of Fuji Electric V-SFT software within the organization.</li>
<li>Monitor for unusual file-opening activity or unexpected child processes originating from the V-SFT application process.</li>
<li>Check with the vendor for the availability of security updates or patches addressing CVE-2026-107894 and deploy them to all affected systems.</li>
</ul>
]]></content:encoded><category domain="severity">high</category><category domain="type">advisory</category><category>vulnerability</category><category>remote-code-execution</category></item></channel></rss>