Critical severity · published Sep 29, 2026
CVE-2026-101354
FAST FAC1203R MmtAtePrase _tWlanTask stack-based overflow
9.6
CVSS
0.4%
EPSS
No
On KEV
Description
A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. The affected element is the function _tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FA
FAC1203R · FAST
20200116_2.0.4 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-101354
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-101354
vdb-entry
https://vuldb.com/vuln/411088
signature
https://vuldb.com/vuln/411088/cti
third-party-advisory
https://vuldb.com/cve/CVE-2026-101354
third-party-advisory
https://vuldb.com/submit/927238
exploit
https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/vul-find-FAST_FAC1203R-twlantask-MmtAtePrase-stack-overflow(1)/vul-find-FAST_FAC1203R-twlantask-MmtAtePrase-stack-overflow
