Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_pass. An unauthenticated remote attacker with access to the affected management interface can submit a crafted authentication request that reaches an unchecked copy into a fixed-size stack buffer, potentially allowing arbitrary code execution as root. The affected management interface is disabled by default and must be affirmatively enabled by the customer before the endpoint becomes reachable. FatPipe recommends restricting management access to trusted administrative networks and using WAN access control lists to limit access to trusted sources. Customers running the affected end-of-life firmware can contact FatPipe Support for help confirming their firmware version and upgrading to a current supported release at https://www.fatpipeinc.com/support/support, [email protected], or +1 800-724-8521 (option 3).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-18 | 1 | Disclosure1 |
| 2026-09-21 | 3 | Disclosure2Patch1 |
| 2026-09-22 | 1 | Disclosure1 |
One Login, Two RCEs: CVE-2026-90822 and CVE-2026-90823 https://www.securifera.com/blog/2026/09/21/one-login-two-rces-cve-2026-90822-and-cve-2026-90823/
Post summary
The tweet announces two remote code execution vulnerabilities (CVE‑2026‑90822 and CVE‑2026‑90823) and links to a blog post, providing technical details but no patch, exploit, or evidence of active exploitation.
Just released public disclosure for two remote code execution vulnerabilities in the same login endpoint for FatPipe VPN products. Patch now if you are running a legacy version. https://www.securifera.com/blog/2026/09/21/one-login-two-rces-cve-2026-90822-and-cve-2026-90823/
Post summary
The announcement discloses two RCE vulnerabilities in FatPipe VPN's login endpoint and instructs users on legacy versions to patch immediately, linking to a detailed blog post.
FatPipe MPVPN: one login path, two unauth root RCEs! CVE-2026-90822: OS command injection in xtremed (protobuf → shell) CVE-2026-90823: stack overflow in auth_user_pass Both CVSS 9.8, reachable before auth when the management interface is enabled. Affected EOL firmware 10.1.2r60p100. Full write-up from Securifera. https://www.securifera.com/blog/2026/09/21/one-login-two-rces-cve-2026-90822-and-cve-2026-90823/ #Cybersecurity #AI #AISecurity #MCP #Claude #GPT #Infosec #Trending #RCE #NetworkSecurity
Post summary
The text discloses two high-severity CVEs affecting FatPipe MPVPN, detailing OS command injection and stack overflow vulnerabilities reachable pre-auth, but provides no evidence of active exploitation, named exploit tools, patches, or PoC code.
تسجيل دخول واحد قد يكشف سطح هجوم أكبر مما يبدو. CVE-2026-90822 وCVE-2026-90823 هما ثغرتا RCE، وهذا يجعل التعامل معهما أولوية لفرق الأمن والتطبيقات، خصوصاً إذا كان مسار تسجيل الدخول ضمن الأنظمة المتأثرة. القيمة التقنية هنا ليست في أرقام CVE فقط، بل في فهم شروط الاستغلال، نطاق التعرض، وحدود التنفيذ عن بُعد كما يوضحها التحليل. عملياً، يجب ربط الثغرات بإدارة الأصول، مراجعة التعرض الخارجي، وتحديد أولوية التحديث أو إجراءات التخفيف بناءً على وجود المكوّن المتأثر في البيئة. One login flow can expose more attack surface than expected. CVE-2026-90822 and CVE-2026-90823 are RCE vulnerabilities, which makes them important for security, AppSec, and operations teams to triage carefully. The technical value is in understanding the exploitation conditions, affected scope, and where remote code execution becomes possible. In practice, this should be mapped against asset inventory, external exposure, and patch or mitigation priority for any affected systems. https://www.securifera.com/blog/2026/09/21/one-login-two-rces-cve-2026-90822-and-cve-2026-90823/ #RCE #CVE #AppSec
Post summary
The post reports two RCE CVEs (CVE-2026-90822 and CVE-2026-90823), explains their exploitation context, and urges asset mapping and patching, but provides no PoC, exploit tool, active exploitation evidence, or specific patch details.
#schwachstellen FatPipe: Kritische Lücken CVE-2026-90822 und CVE-2026-90823 in Alt-Firmware von MPVPN, WARP und IPVPN #cve202690822 #cve202690823 #fatpipe #ipvpn #mpvpn #warp https://cybersecurity-news.de/fatpipe-cve-2026-90822-cve-2026-90823-alt-firmware
Post summary
The tweet announces the existence of two critical FatPipe CVEs (CVE-2026-90822 and CVE-2026-90823) affecting legacy firmware of MPVPN, WARP, and IPVPN products, and links to a cybersecurity news article for further information, but provides no specific vulnerability details, exploit code, PoC, remediation steps, or active exploitation claims.