Loading story…
Fuji Electric Monitouch V-SFT-6 human-machine interface (HMI) configuration software is affected by two critical vulnerabilities: a heap-based buffer overflow (CVE-2025-54496) and a stack-based buffer overflow (CVE-2025-54526). Both vulnerabilities can be triggered by processing specially crafted project files, potentially allowing attackers to execute arbitrary code on affected systems. The vulnerabilities impact at least version 6.2.7.0 of the software, and exploitation could result in device crashes or full compromise of the HMI environment. The vulnerabilities are rated with a CVSS v4 base score of 8.4, indicating high severity, and require user interaction to trigger, but do not require remote exploitation.
CISA has issued an advisory (ICSA-25-308-01) detailing these vulnerabilities and urging users and administrators to review technical details and apply recommended mitigations. The advisories emphasize the risk to industrial control environments and recommend caution when handling project files from untrusted sources. No specific affected product list has been published, but the vulnerabilities are confirmed in the latest available version. Organizations using Fuji Electric Monitouch V-SFT-6 should prioritize patching and follow CISA's mitigation guidance to reduce the risk of exploitation.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
Public vulnerability records for the two Fuji Electric Monitouch V-SFT-6 flaws were published, including severity information and remediation guidance. CVE-2025-54526 was described as a high-severity stack-based buffer overflow with no public exploit evidence at publication time.
CISA disclosed two critical vulnerabilities in Fuji Electric Monitouch V-SFT-6 HMI configuration software: a heap-based buffer overflow (CVE-2025-54496) and a stack-based buffer overflow (CVE-2025-54526). The agency said exploitation requires a user to process a malicious project file, provided mitigation guidance, and noted no public exploitation had been reported.
Fuji Electric addressed the vulnerabilities in Monitouch V-SFT-6 version 6.2.8.0 and recommended customers update to version 6.2.9.0 or later. The affected version identified in the advisory was 6.2.7.0.
Rocco Calvi of TecSecurity reported two vulnerabilities in Fuji Electric Monitouch V-SFT-6 to the vendor via Trend Micro Zero Day Initiative. The flaws were later assigned CVE-2025-54496 and CVE-2025-54526.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
4 references tracked. Mallory keeps watching after this page renders.
cvefeed.io
Open sourcecvefeed.io
Open sourcecisa.gov
Open sourcecisa.gov
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A critical out-of-bounds write vulnerability, tracked as CVE-2025-53524, has been identified in Fuji Electric Monitouch V-SFT software. The flaw exists in the parsing of V7 project files, where insufficient validation of user-supplied data can result in a write past the end of an allocated buffer or object. Successful exploitation requires user interaction, such as opening a malicious file or visiting a crafted web page, and can allow attackers to execute arbitrary code in the context of the current process. The vulnerability has been assigned a CVSS score of 7.8 to 8.4, indicating high severity, and affects multiple versions of the Monitouch V-SFT product line. Fuji Electric has released an update to address this vulnerability, and users are strongly advised to apply the patch as soon as possible. The issue was reported to the vendor in July 2025 and publicly disclosed in December 2025 through coordinated advisories. Security researchers, including Rocco Calvi of TecSecurity, are credited with discovering the flaw. No evidence of remote exploitation without user interaction has been reported, but the vulnerability poses a significant risk to organizations using the affected software in industrial environments.
Jun 29, 2026
Fuji Electric **V-SFT** versions `6.2.10.0` and earlier were reported with two vulnerabilities triggered by opening a crafted `V7` file. **CVE-2026-32928** is a stack-based buffer overflow in `VS6ComFile!CSaveData::_conv_AnimationItem` that can lead to arbitrary code execution, while **CVE-2026-32929** is an out-of-bounds read in `VS6ComFile!get_macro_mem_COM` that can expose information from the affected product. Both issues were reported through **JPCERT/CC** and classified under **CWE-121** and **CWE-125**, respectively, with severity assessments published using **CVSS v3.1** and **CVSS v4.0**. The vulnerabilities affect engineering software used in industrial environments, and vendor and advisory references were published by **Fuji Electric** and **JVN**, indicating that organizations using V-SFT should identify affected installations and prioritize remediation.
Jun 29, 2026
CISA updated an advisory for Mitsubishi Electric FA Engineering Software to address two vulnerabilities affecting **GX Works2**, **MELSOFT Navigator**, and **EZSocket**. The issues, tracked as `CVE-2021-20606` and `CVE-2021-20607`, are an out-of-bounds read and an integer underflow that can be triggered when a user opens a specially crafted malicious project file, potentially causing a denial-of-service condition. The vulnerabilities each carry a CVSS v3 base score of **5.5** and require user interaction, limiting exploitation to scenarios where a victim opens a malicious file. Mitsubishi Electric published fixed versions and update guidance in its product security advisory, and CISA said the affected software is used in the **Critical Manufacturing** sector worldwide. CISA also noted that it was not aware of any public exploitation specifically targeting these flaws.
Jun 29, 2026