Vulnerability · Published Sep 29, 2026 · Assigned by VulDB

CVE-2026-101354FAST FAC1203R MmtAtePrase _tWlanTask stack-based overflow

Critical 9.6

In plain English

A critical-severity stack buffer overflow in FAC1203R from FAST. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).

Severity (CVSS 3.1)9.6Critical

Exploit odds (30 days)0.4%top 67.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. The affected element is the function _tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
FAST	FAC1203R	20200116_2.0.4

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-411088 | FAST FAC1203R MmtAtePrase _tWlanTask stack-based overflow vdb-entry, technical-description
VDB-411088 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-101354 | CVE Analysis and Report third-party-advisory
Submit #927238 | FAST FAC1203R 20200116_2.0.4 Stack-based Buffer Overflow third-party-advisory
https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/vul-find-FAST_FAC1203R-twlantask-MmtAtePrase-stack-overflow(1)/vul-find-FAST_FAC1203R-twlantask-MmtAtePrase-stack-overflow exploit