CyberSecBulletin

Fatedier vulnerabilities

We track 2 vulnerabilities in Fatedier products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 13, 2026.

2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score

Latest Fatedier vulnerabilities

  • 8.7 High severity

    frp: Improper Validation of Array Index

    CVE-2026-73564Fatedier

    frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition

  • 9.1 Critical severity

    frp: Improper Authentication

    CVE-2026-40910Fatedier

    frp is a fast reverse proxy. From 0.43.0 to 0.68.0, frp contains an authentication bypass in the HTTP vhost routing path when routeByHTTPUser is used as part of access control. In proxy-style requests, the routing logic uses the username from Proxy-Authorizati