What’s Vulnerable › Vulnerabilities

CVE-2026-32928

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-01 · updated 2026-10-26
• Weakness: CWE-121

Description

V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem. Opening a crafted V7 file may lead to arbitrary code execution on the affected product.

Affected products

• FUJI ELECTRIC CO., LTD. and Hakko Electronics Co., Ltd. V-SFT: through 6.2.10.0

References

• https://felib.fujielectric.co.jp/en/M10010/M20060/document_detail/5d9dd71d-9494-41a4-aa5c-8e6b8b21066b?region=en-glb
• https://jvn.jp/en/vu/JVNVU90448293/

Get alerted when CVE-2026-32928 or the next vulnerability affects your stack