MPVPN vulnerabilities

2 known vulnerabilities in MPVPN from FatPipe Networks. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  MPVPN: Stack-based Buffer Overflow

  CVE-2026-90823Sep 17, 2026FatPipe Networks

  FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_pass. An unauthenticated remote attacker with access to the affected management interface can submit a

• 9.8 Critical severity

  MPVPN: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-90822Sep 17, 2026FatPipe NetworksEPSS 1.43%

  FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed daemon. An unauthenticated remote attacker with access to the affected management interface can submit