{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/fuji-electric/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:fujielectric:v-sft:*:*:*:*:*:*:*:*","cpe:2.3:a:fuji_electric:v_sft:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-107894"},{"cvss":7.8,"id":"CVE-2026-107895"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["V-SFT"],"_cs_severities":["high"],"_cs_tags":["vulnerability","remote-code-execution"],"_cs_type":"advisory","_cs_vendors":["Fuji Electric"],"content_html":"\u003cp\u003eFuji Electric V-SFT contains a stack-based buffer overflow vulnerability identified as CVE-2026-107894. This vulnerability is triggered when the application parses a specially crafted V7 file. Successful exploitation may result in information exposure or arbitrary code execution within the context of the application.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation could lead to arbitrary code execution or unauthorized information disclosure.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all instances of Fuji Electric V-SFT software within the organization.\u003c/li\u003e\n\u003cli\u003eMonitor for unusual file-opening activity or unexpected child processes originating from the V-SFT application process.\u003c/li\u003e\n\u003cli\u003eCheck with the vendor for the availability of security updates or patches addressing CVE-2026-107894 and deploy them to all affected systems.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-26T07:37:30Z","date_published":"2026-10-26T07:37:18Z","id":"https://feed.craftedsignal.io/briefs/2026-10-fuji-v-sft-overflow/","summary":"Fuji Electric V-SFT is vulnerable to a stack-based buffer overflow during the parsing of crafted V7 files, potentially enabling arbitrary code execution.","title":"Fuji Electric V-SFT: Stack-based buffer overflow (CVE-2026-107894)","url":"https://feed.craftedsignal.io/briefs/2026-10-fuji-v-sft-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - Fuji Electric","version":"https://jsonfeed.org/version/1.1"}