Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed daemon. An unauthenticated remote attacker with access to the affected management interface can submit crafted input to the AuthFormServlet endpoint, causing authentication data to be processed by a shell and allowing arbitrary commands to execute as root. The affected management interface is disabled by default and must be affirmatively enabled by the customer before the endpoint becomes reachable. FatPipe recommends restricting management access to trusted administrative networks and using WAN access control lists to limit access to trusted sources. Customers running the affected end-of-life firmware can contact FatPipe Support for help confirming their firmware version and upgrading to a current supported release at https://www.fatpipeinc.com/support/support, [email protected], or +1 800-724-8521 (option 3).
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-18 | 1 | Disclosure1 |
| 2026-09-21 | 3 | Disclosure1Patch2 |
| 2026-09-22 | 1 | Disclosure1 |
One Login, Two RCEs: CVE-2026-90822 and CVE-2026-90823 https://www.securifera.com/blog/2026/09/21/one-login-two-rces-cve-2026-90822-and-cve-2026-90823/
Post summary
The tweet discloses two newly identified RCE vulnerabilities (CVE‑2026‑90822 and CVE‑2026‑90823) in OneLogin, directing readers to a detailed blog for full technical information.
Just released public disclosure for two remote code execution vulnerabilities in the same login endpoint for FatPipe VPN products. Patch now if you are running a legacy version. https://www.securifera.com/blog/2026/09/21/one-login-two-rces-cve-2026-90822-and-cve-2026-90823/
Post summary
The post announces two remote code execution flaws in FatPipe VPN's login endpoint and urges users of legacy versions to patch immediately, linking to a detailed blog advisory.
FatPipe MPVPN: one login path, two unauth root RCEs! CVE-2026-90822: OS command injection in xtremed (protobuf → shell) CVE-2026-90823: stack overflow in auth_user_pass Both CVSS 9.8, reachable before auth when the management interface is enabled. Affected EOL firmware 10.1.2r60p100. Full write-up from Securifera. https://www.securifera.com/blog/2026/09/21/one-login-two-rces-cve-2026-90822-and-cve-2026-90823/ #Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #RCE #NetworkSecurity
Post summary
The text announces two new unauthenticated root RCE vulnerabilities (CVE-2026-90822 and CVE-2026-90823) in FatPipe MPVPN with technical details and a link to a full Securifera write-up, but does not name an exploit tool, report active exploitation, or mention any patch.
تسجيل دخول واحد قد يكشف سطح هجوم أكبر مما يبدو. CVE-2026-90822 وCVE-2026-90823 هما ثغرتا RCE، وهذا يجعل التعامل معهما أولوية لفرق الأمن والتطبيقات، خصوصاً إذا كان مسار تسجيل الدخول ضمن الأنظمة المتأثرة. القيمة التقنية هنا ليست في أرقام CVE فقط، بل في فهم شروط الاستغلال، نطاق التعرض، وحدود التنفيذ عن بُعد كما يوضحها التحليل. عملياً، يجب ربط الثغرات بإدارة الأصول، مراجعة التعرض الخارجي، وتحديد أولوية التحديث أو إجراءات التخفيف بناءً على وجود المكوّن المتأثر في البيئة. One login flow can expose more attack surface than expected. CVE-2026-90822 and CVE-2026-90823 are RCE vulnerabilities, which makes them important for security, AppSec, and operations teams to triage carefully. The technical value is in understanding the exploitation conditions, affected scope, and where remote code execution becomes possible. In practice, this should be mapped against asset inventory, external exposure, and patch or mitigation priority for any affected systems. https://www.securifera.com/blog/2026/09/21/one-login-two-rces-cve-2026-90822-and-cve-2026-90823/ #RCE #CVE #AppSec
Post summary
The post describes two login-flow RCE CVEs and emphasizes asset mapping, exposure review, and patch/mitigation prioritization, but does not provide PoC, exploit tooling, or active-exploitation evidence.
#schwachstellen FatPipe: Kritische Lücken CVE-2026-90822 und CVE-2026-90823 in Alt-Firmware von MPVPN, WARP und IPVPN #cve202690822 #cve202690823 #fatpipe #ipvpn #mpvpn #warp https://cybersecurity-news.de/fatpipe-cve-2026-90822-cve-2026-90823-alt-firmware
Post summary
The tweet announces two critical CVEs (CVE-2026-90822 and CVE-2026-90823) affecting FatPipe products MPVPN, WARP, and IPVPN in legacy firmware, linking to a news article for further details, without providing PoC, exploit tools, or remediation specifics.