Secuno
ENNL
Book demo

CVE-2026-90822

9.8 CRITICAL
  1. Published17 Sept 2026

Description

FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain an OS command injection vulnerability in the xtremed daemon. An unauthenticated remote attacker with access to the affected management interface can submit crafted input to the AuthFormServlet endpoint, causing authentication data to be processed by a shell and allowing arbitrary commands to execute as root. The affected management interface is disabled by default and must be affirmatively enabled by the customer before the endpoint becomes reachable. FatPipe recommends restricting management access to trusted administrative networks and using WAN access control lists to limit access to trusted sources. Customers running the affected end-of-life firmware can contact FatPipe Support for help confirming their firmware version and upgrading to a current supported release at https://www.fatpipeinc.com/support/support, [email protected], or +1 800-724-8521 (option 3).

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-814768.1
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper…
CVE-2026-925808.8
In AVideo through 29.0, the CloneSite plugin is vulnerable to stored OS command…
CVE-2026-923989.1
A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this…
CVE-2026-203069.1
A vulnerability in the REST API of Cisco ISE and ISE-PIC could allow an authenticated,…
CVE-2026-203059.1
A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an…
CVE-2026-923979.1
A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this…

Frequently asked

Is CVE-2026-90822 being actively exploited?

CVE-2026-90822 is not in the CISA KEV catalog.

How severe is CVE-2026-90822?

CVE-2026-90822 has a CVSS 3.1 base score of 9.8, rated critical.

How do I fix CVE-2026-90822?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2026-90822 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.