Loading story…
A critical out-of-bounds write vulnerability, tracked as CVE-2025-53524, has been identified in Fuji Electric Monitouch V-SFT software. The flaw exists in the parsing of V7 project files, where insufficient validation of user-supplied data can result in a write past the end of an allocated buffer or object. Successful exploitation requires user interaction, such as opening a malicious file or visiting a crafted web page, and can allow attackers to execute arbitrary code in the context of the current process. The vulnerability has been assigned a CVSS score of 7.8 to 8.4, indicating high severity, and affects multiple versions of the Monitouch V-SFT product line.
Fuji Electric has released an update to address this vulnerability, and users are strongly advised to apply the patch as soon as possible. The issue was reported to the vendor in July 2025 and publicly disclosed in December 2025 through coordinated advisories. Security researchers, including Rocco Calvi of TecSecurity, are credited with discovering the flaw. No evidence of remote exploitation without user interaction has been reported, but the vulnerability poses a significant risk to organizations using the affected software in industrial environments.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
On December 17, 2025, CVE-2025-53524 was publicly disclosed through ZDI and other advisory channels, describing an out-of-bounds write in Fuji Electric Monitouch V-SFT/V-SFT-6 that could lead to arbitrary code execution when processing crafted project files. The issue was also referenced in CISA-related advisory material and public vulnerability databases.
Fuji Electric released a software update to address the Monitouch V-SFT file parsing out-of-bounds write vulnerability. The fix was available by the time of public disclosure.
The out-of-bounds write vulnerability later assigned CVE-2025-53524 was reported to Fuji Electric in July 2025. One advisory credits Rocco Calvi of TecSecurity with the report.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
4 references tracked. Mallory keeps watching after this page renders.
cvefeed.io
Open sourcezerodayinitiative.com
Open sourcezerodayinitiative.com
Open sourcezerodayinitiative.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Fuji Electric Monitouch V-SFT-6 human-machine interface (HMI) configuration software is affected by two critical vulnerabilities: a heap-based buffer overflow (CVE-2025-54496) and a stack-based buffer overflow (CVE-2025-54526). Both vulnerabilities can be triggered by processing specially crafted project files, potentially allowing attackers to execute arbitrary code on affected systems. The vulnerabilities impact at least version 6.2.7.0 of the software, and exploitation could result in device crashes or full compromise of the HMI environment. The vulnerabilities are rated with a CVSS v4 base score of 8.4, indicating high severity, and require user interaction to trigger, but do not require remote exploitation. CISA has issued an advisory (ICSA-25-308-01) detailing these vulnerabilities and urging users and administrators to review technical details and apply recommended mitigations. The advisories emphasize the risk to industrial control environments and recommend caution when handling project files from untrusted sources. No specific affected product list has been published, but the vulnerabilities are confirmed in the latest available version. Organizations using Fuji Electric Monitouch V-SFT-6 should prioritize patching and follow CISA's mitigation guidance to reduce the risk of exploitation.
Jun 29, 2026
Fuji Electric **V-SFT** versions `6.2.10.0` and earlier were reported with two vulnerabilities triggered by opening a crafted `V7` file. **CVE-2026-32928** is a stack-based buffer overflow in `VS6ComFile!CSaveData::_conv_AnimationItem` that can lead to arbitrary code execution, while **CVE-2026-32929** is an out-of-bounds read in `VS6ComFile!get_macro_mem_COM` that can expose information from the affected product. Both issues were reported through **JPCERT/CC** and classified under **CWE-121** and **CWE-125**, respectively, with severity assessments published using **CVSS v3.1** and **CVSS v4.0**. The vulnerabilities affect engineering software used in industrial environments, and vendor and advisory references were published by **Fuji Electric** and **JVN**, indicating that organizations using V-SFT should identify affected installations and prioritize remediation.
Jun 29, 2026
A critical security vulnerability, tracked as CVE-2025-34299, was discovered in Monsta FTP versions 2.11 and earlier, allowing unauthenticated attackers to upload arbitrary files to affected servers. This flaw enables remote code execution (RCE) without requiring any authentication, as attackers can trick the application into downloading and saving malicious files from attacker-controlled (S)FTP servers directly onto the victim’s system. The vulnerability was identified by cybersecurity researchers at watchTowr, who confirmed that the exploit could be used to gain full control over targeted web servers running vulnerable versions of Monsta FTP. Monsta FTP is widely used for web-based file management by organizations ranging from financial institutions to individual website owners, increasing the potential impact of this vulnerability. Security advisories emphasize the critical nature of the flaw, with a CVSS score of 9.3, and recommend immediate patching or mitigation to prevent exploitation. The vulnerability is pre-authentication, meaning attackers do not need valid credentials to exploit it, making unpatched systems especially susceptible to takeover and compromise.
Jul 12, 2026