Fast has 6 CVEs on record. Disclosure cadence is accelerating: 6 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 6. The median CVSS is 9.9 (critical), with 5 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-119 (6) and CWE-121 (6). Most affected products: FAC1200R (2), FAC1900R (2), FAC1203R (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.9
- Publish → KEV
- —
- Last 90 days
- 6 prev 0
Worst active — by depth score
CVE-2026-101039Critical· 10.0A vulnerability was identified in FAST FAC1900R 20190827_2.0.267CVE-2026-101038Critical· 9.9A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.267CVE-2026-101037Critical· 9.9A vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.267CVE-2026-96257Critical· 10.0A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.467CVE-2026-101354Critical· 9.6A security flaw has been discovered in FAST FAC1203R 20200116_2.0.465
Fast vulnerabilities
CVEs affecting Fast, newest first. Open any entry for full detail, references, and exploit status.
6 CVEsRSS
CVE-2026-101354Critical· 9.6PoCA security flaw has been discovered in FAST FAC1203R 20200116_2.0.4
A security flaw has been discovered in FAST FAC1203R 20200116_2.0.4. The affected element is the function _tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must…
CVE-2026-101039Critical· 10.0PoCA vulnerability was identified in FAST FAC1900R 20190827_2.0.2
A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy_msg_element of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be execu…
CVE-2026-101038Critical· 9.9PoCA vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2
A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAtePrase of the component MmtAtePrase Parser. This manipulation causes stack-based buffer overflow. Remote exploitation…
CVE-2026-101037Critical· 9.9PoCA vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.2
A vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.2. Affected is the function parse_advertisement_frame of the component devdiscover Service. The manipulation results in stack-based buffer overflow. The attack may be launched r…
CVE-2026-96676Medium· 6.3PoCA vulnerability was identified in Fast FAC1900R 20190827_2.0.2
A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impacted element is the function get_alias_name of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote.…
CVE-2026-96257Critical· 10.0PoCA flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4
A flaw has been found in Fast FAC1203R Gigabit Edition 2.0.4. Affected by this issue is the function copy_msg_element of the component Device Discovery Service. Executing a manipulation can lead to stack-based buffer overflow. The attack…