CVE-2026-32927 is an out-of-bounds read vulnerability in V-SFT software versions 6.2.10.0 and prior, specifically within the VS6MemInIF!set_temp_type_default function. This vulnerability can be triggered by opening a crafted V7 file, potentially causing the software to read memory outside the intended bounds. This may result in unauthorized disclosure of information from the affected system. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with local attack vector, low attack complexity, no privileges required, user interaction needed, and impacts confidentiality, integrity, and availability.

Exploitation of this vulnerability may lead to information disclosure from the affected V-SFT product. The CVSS vector indicates high impact on confidentiality, integrity, and availability, though the attack requires local access and user interaction. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patches or fixes are documented, users should monitor the vendor's communications for updates. Until a fix is available, avoid opening untrusted V7 files and limit local access to trusted users only.