CVE-2026-96676
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impacted element is the function get_alias_name of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Assessment
A stack-based buffer overflow may allow a remote attacker to execute arbitrary code or crash the device, leading to full compromise.
Recommendation
Due to vendor non-response, consider isolating the device on the network, restricting management interface access, and monitoring for patches. If possible, replace the device with a supported model.
Other vulnerabilities in Fast FAC1900R
Original NVD description (English source)
A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impacted element is the function get_alias_name of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS