CVE-2026-96257

critical · 9.3

A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copy_msg_element of the component Device Discovery Service. Executing a manipulation can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

9.3

CVSS

1.0%

EPSS (exploit prob.)

62nd

EPSS percentile

2026-09-23

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-119CWE-121

References

https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/vul-find-FAST_FAC1203R-copy_msg_element
https://vuldb.com/cve/CVE-2026-96257
https://vuldb.com/submit/901889
https://vuldb.com/vuln/408707
https://vuldb.com/vuln/408707/cti

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-96257