CVE-2026-96676

MEDIUM 6.3

Fast FAC1900R uhttpd get_alias_name stack-based overflow

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impacted element is the function get_alias_name of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-121 CWE-119
Vendor	fast
Product	fac1900r
Published	Sep 23, 2026

Stay Ahead of the Next One

Get instant alerts for fast fac1900r

Be the first to know when new medium vulnerabilities affecting fast fac1900r are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Fast / FAC1900R

20190827_2.0.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/408999 vuldb.com: https://vuldb.com/vuln/408999/cti vuldb.com: https://vuldb.com/cve/CVE-2026-96676 vuldb.com: https://vuldb.com/submit/902770 github.com: https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/vul-find-FAST_FAC1900R-devDiscoverNotify

Credits

🔍 xiaobor123 (VulDB User) VulDB CNA Team