EUVD-2026-85726
GHSA-mh53-74jr-297q
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable uhttpd handler with low complexity but authentication required (PR:L per vendor); conservative partial C/I/A retained matching VulDB, though device crash could justify A:H.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impacted element is the function get_alias_name of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Stack-based buffer overflow in the get_alias_name function of the uhttpd web management service on the Fast FAC1900R SOHO router allows a low-privilege authenticated remote attacker to overwrite stack memory with a crafted request, resulting in limited loss of confidentiality, integrity, and availability (CVSS 4.0 base 5.3; vendor vector PR:L). Publicly available exploit code exists and is referenced from a GitHub proof-of-concept repository targeting the device's devDiscoverNotify handling, so the flaw is straightforward to reproduce for anyone who can reach the management interface. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to the FAC1900R's uhttpd HTTP management interface and, per the vendor CVSS vector (PR:L), a low-privilege authenticated session - meaning the attacker must first reach and log into (or otherwise gain credentialed access to) the router's web service before sending the crafted request that triggers the get_alias_name stack overflow. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a stack-based buffer overflow (CWE-121) in the get_alias_name function of the uhttpd web server on the Fast FAC1900R SOHO router. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch has been identified at time of analysis, so exposure reduction is the primary control. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today