Loading story…
Fuji Electric V-SFT versions 6.2.10.0 and earlier were reported with two vulnerabilities triggered by opening a crafted V7 file. CVE-2026-32928 is a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem that can lead to arbitrary code execution, while CVE-2026-32929 is an out-of-bounds read in VS6ComFile!get_macro_mem_COM that can expose information from the affected product.
Both issues were reported through JPCERT/CC and classified under CWE-121 and CWE-125, respectively, with severity assessments published using CVSS v3.1 and CVSS v4.0. The vulnerabilities affect engineering software used in industrial environments, and vendor and advisory references were published by Fuji Electric and JVN, indicating that organizations using V-SFT should identify affected installations and prioritize remediation.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
5 events from the most recent confirmed update back to the earliest known activity.
JPCERT/CC received a report of CVE-2026-32927 on 2026-04-01 affecting V-SFT 6.2.10.0 and earlier. The flaw is an out-of-bounds read in VS6MemInIF!set_temp_type_default triggered by opening a crafted V7 file, which may allow information disclosure.
JPCERT/CC recorded CVE-2026-32926 on 2026-04-01 affecting V-SFT 6.2.10.0 and earlier. The flaw is an out-of-bounds read in VS6ComFile!load_link_inf triggered by opening a crafted V7 file, which may allow information disclosure.
JPCERT/CC received a report of CVE-2026-32925 on 2026-04-01 affecting V-SFT 6.2.10.0 and earlier. The flaw is a stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom that can be triggered by opening a crafted V7 file and may allow arbitrary code execution.
JPCERT/CC received a report of CVE-2026-32929 affecting V-SFT 6.2.10.0 and earlier on 2026-04-01. The vulnerability is an out-of-bounds read in VS6ComFile!get_macro_mem_COM triggered by opening a crafted V7 file, which may lead to information disclosure.
JPCERT/CC received a report of CVE-2026-32928 affecting V-SFT 6.2.10.0 and earlier on 2026-04-01. The flaw is a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem that can be triggered by opening a crafted V7 file and may allow arbitrary code execution.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
5 references tracked. Mallory keeps watching after this page renders.
cvefeed.io
Open sourcecvefeed.io
Open sourcecvefeed.io
Open sourcecvefeed.io
Open sourcecvefeed.io
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A critical out-of-bounds write vulnerability, tracked as CVE-2025-53524, has been identified in Fuji Electric Monitouch V-SFT software. The flaw exists in the parsing of V7 project files, where insufficient validation of user-supplied data can result in a write past the end of an allocated buffer or object. Successful exploitation requires user interaction, such as opening a malicious file or visiting a crafted web page, and can allow attackers to execute arbitrary code in the context of the current process. The vulnerability has been assigned a CVSS score of 7.8 to 8.4, indicating high severity, and affects multiple versions of the Monitouch V-SFT product line. Fuji Electric has released an update to address this vulnerability, and users are strongly advised to apply the patch as soon as possible. The issue was reported to the vendor in July 2025 and publicly disclosed in December 2025 through coordinated advisories. Security researchers, including Rocco Calvi of TecSecurity, are credited with discovering the flaw. No evidence of remote exploitation without user interaction has been reported, but the vulnerability poses a significant risk to organizations using the affected software in industrial environments.
Jun 29, 2026
Fuji Electric Monitouch V-SFT-6 human-machine interface (HMI) configuration software is affected by two critical vulnerabilities: a heap-based buffer overflow (CVE-2025-54496) and a stack-based buffer overflow (CVE-2025-54526). Both vulnerabilities can be triggered by processing specially crafted project files, potentially allowing attackers to execute arbitrary code on affected systems. The vulnerabilities impact at least version 6.2.7.0 of the software, and exploitation could result in device crashes or full compromise of the HMI environment. The vulnerabilities are rated with a CVSS v4 base score of 8.4, indicating high severity, and require user interaction to trigger, but do not require remote exploitation. CISA has issued an advisory (ICSA-25-308-01) detailing these vulnerabilities and urging users and administrators to review technical details and apply recommended mitigations. The advisories emphasize the risk to industrial control environments and recommend caution when handling project files from untrusted sources. No specific affected product list has been published, but the vulnerabilities are confirmed in the latest available version. Organizations using Fuji Electric Monitouch V-SFT-6 should prioritize patching and follow CISA's mitigation guidance to reduce the risk of exploitation.
Jun 29, 2026
CISA updated an advisory for Mitsubishi Electric FA Engineering Software to address two vulnerabilities affecting **GX Works2**, **MELSOFT Navigator**, and **EZSocket**. The issues, tracked as `CVE-2021-20606` and `CVE-2021-20607`, are an out-of-bounds read and an integer underflow that can be triggered when a user opens a specially crafted malicious project file, potentially causing a denial-of-service condition. The vulnerabilities each carry a CVSS v3 base score of **5.5** and require user interaction, limiting exploitation to scenarios where a victim opens a malicious file. Mitsubishi Electric published fixed versions and update guidance in its product security advisory, and CISA said the affected software is used in the **Critical Manufacturing** sector worldwide. CISA also noted that it was not aware of any public exploitation specifically targeting these flaws.
Jun 29, 2026