CVE-2026-90823 Details
Description
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_pass. An unauthenticated remote attacker with access to the affected management interface can submit a crafted authentication request that reaches an unchecked copy into a fixed-size stack buffer, potentially allowing arbitrary code execution as root. The affected management interface is disabled by default and must be affirmatively enabled by the customer before the endpoint becomes reachable. FatPipe recommends restricting management access to trusted administrative networks and using WAN access control lists to limit access to trusted sources. Customers running the affected end-of-life firmware can contact FatPipe Support for help confirming their firmware version and upgrading to a current supported release at https://www.fatpipeinc.com/support/support, [email protected], or +1 800-724-8521 (option 3).
A stack-based buffer overflow vulnerability has been identified in FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100. The vulnerability exists in the authentication module, where an unauthenticated remote attacker with access to the management interface can send a crafted authentication request. This request exploits an unchecked buffer copy into a fixed-size stack buffer, potentially leading to arbitrary code execution with root privileges. Although the vulnerable management interface is disabled by default, it can be enabled by the customer, making the endpoint reachable for exploitation.
Customers running the affected firmware version can contact FatPipe Support to confirm their firmware version and upgrade to a current supported release. FatPipe Support can be reached via the FatPipe Support website, email, or phone.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 17, 2026CISA-ADP
Assessed Sep 17, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.fatpipeinc.com/support/support | [email protected] | Vendor |
| https://www.securifera.com/advisories/ | [email protected] | AdvisoryBundleRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| FatPipe MPVPN | 10.1.2r60p100 |
CPE
Remediation
| |
| FatPipe WARP | 10.1.2r60p100 |
CPE
Remediation
| |
| FatPipe IPVPN | 10.1.2r60p100 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 17, 2026 | CVE Modified | CISA-ADP |
| Sep 17, 2026 | CVE Modified | [email protected] |
| Sep 17, 2026 | New CVE Received | [email protected] |