FatPipe MPVPN/WARP/IPVPN 10.1.2r60p100 Authentication /usr/sbin/auth_user_pass buffer overflow

Summaryinfo

A vulnerability has been found in FatPipe MPVPN, WARP and IPVPN 10.1.2r60p100 and classified as very critical. This affects an unknown function of the file /usr/sbin/auth_user_pass of the component Authentication. This manipulation causes buffer overflow. This vulnerability is handled as CVE-2026-90823. The attack can be initiated remotely. There is not any exploit available.

Detailsinfo

A vulnerability has been found in FatPipe MPVPN, WARP and IPVPN 10.1.2r60p100 and classified as very critical. Affected by this vulnerability is an unknown part of the file /usr/sbin/auth_user_pass of the component Authentication. The manipulation with an unknown input leads to a buffer overflow vulnerability. The CWE definition for the vulnerability is CWE-120. The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_pass. An unauthenticated remote attacker with access to the affected management interface can submit a crafted authentication request that reaches an unchecked copy into a fixed-size stack buffer, potentially allowing arbitrary code execution as root. The affected management interface is disabled by default and must be affirmatively enabled by the customer before the endpoint becomes reachable. FatPipe recommends restricting management access to trusted administrative networks and using WAN access control lists to limit access to trusted sources. Customers running the affected end-of-life firmware can contact FatPipe Support for help confirming their firmware version and upgrading to a current supported release at https://www.fatpipeinc.com/support/support, [email protected], or +1 800-724-8521 (option 3).

The advisory is shared at securifera.com. This vulnerability is known as CVE-2026-90823 since 09/13/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details are known, but no exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 09/17/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• FatPipe

Name

• IPVPN
• MPVPN
• WARP

Version

• 10.1.2r60p100

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion