FatPipe WARP/IPVPN/MPVPN - Authorization Bypass

FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 contain a missing authorization caused by lack of access control in the web management interface, letting remote attackers access sensitive URLs, exploit requires no authentication. id: CVE-2021-27858 info: name:...

CVE-2026-54686-poc

CVE-2026-54686: Warp DCS ライフサイクルフック偽装 PoC English version 概要 このリポジトリは、Warp の公開アドバイザリ GHSA-9w2v-jhww-vm85 に基づく CVE-2026-54686 の安全なローカル PoC です。 Warp の修正前バージョンは、PTY ストリームから届く一部の状態変更 DCS ライフサイクルフックについて、そのフックが現在のセッション用に Warp の シェル統合から送られたものかを検証していませんでした。攻撃者が被害者に 攻撃者制御の端末出力を Warp 上で表示させられる場合、選択されたライフ...

CVE-2026-48732-poc

CVE-2026-48732: Warp Remote SSH cwd コマンドインジェクション PoC English version 概要 このリポジトリは、Warp の従来の SSH バックグラウンドコマンド処理に存在する、高深刻度の OS コマンドインジェクション脆弱性 CVE-2026-48732 の Proof of Concept PoC です。 影響を受ける Warp バージョンでは、SSH セッションから報告されたリモートの作業ディレクトリ cwd...

CVE-2024-41997

Warp Terminal RCE CVE-2024-41997 サニタイズされていない warp:// URIスキームハンドラを介したコマンドインジェクション。詳細な解説は 0day.gg にあります。 概要...

CVE-2026-90823

FatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/authuserpass. An unauthenticated remote attacker with access to the affected management interface can submit a crafted authentication request that...

CVE-2026-90823

FatPipe MPVPN, WARP, and IPVPN appliances running end-of-life firmware 10.1.2r60p100 contain a stack-based buffer overflow in /usr/sbin/auth_user_pass. An unauthenticated remote attacker who can reach the management interface can submit a crafted authentication request that triggers an unchecked ...

CVE-2026-90506

A vulnerability was determined in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This impacts an unknown function of the component Save Account Job. This manipulation causes race condition. The attack may be initiated remotely. The attack's complexity is rated as high. Th...

CVE-2026-90505

A vulnerability was found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This affects the function doUpdateLicenseKey. The manipulation results in race condition. The attack can be launched remotely. The attack requires a high level of complexity. The exploitability is...

CVE-2026-90507

A vulnerability was identified in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. Affected is the function getsurgesubscription of the file services/subscription.py of the component Subscription Handler. Such manipulation of the argument key leads to improper access...

CVE-2026-90504

A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. The impacted element is the function authorized. The manipulation of the argument SECRETKEY leads to missing authentication. The attack can be initiated remotely. The exploit has been disclos...

CVE-2026-90507

CVE-2026-90507 affects the vvbbnn00 WARP-Clash-API (up to commit c7bf236), specifically the get_surge_subscription function in services/subscription.py (Subscription Handler component). Improper manipulation of the key argument leads to improper access control , exploitable remotely without authe...

EUVD-2026-76980

A vulnerability was identified in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. Affected is the function getsurgesubscription of the file services/subscription.py of the component Subscription Handler. Such manipulation of the argument key leads to improper access...

CVE-2026-90507 vvbbnn00 WARP-Clash-API Subscription subscription.py get_surge_subscription access control

A vulnerability was identified in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. Affected is the function getsurgesubscription of the file services/subscription.py of the component Subscription Handler. Such manipulation of the argument key leads to improper access...

CVE-2026-90506 vvbbnn00 WARP-Clash-API Save Account Job race condition

A vulnerability was determined in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This impacts an unknown function of the component Save Account Job. This manipulation causes race condition. The attack may be initiated remotely. The attack's complexity is rated as high. Th...

CVE-2026-90506

A race condition vulnerability was identified in the Save Account Job component of vvbbnn00 WARP-Clash-API (affecting versions up to commit c7bf2360073959861219b422e51ae86411051b46). The flaw can be exploited remotely over the network with low privileges, though attack complexity is rated high , ...

EUVD-2026-76979

A vulnerability was determined in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This impacts an unknown function of the component Save Account Job. This manipulation causes race condition. The attack may be initiated remotely. The attack's complexity is rated as high. Th...

EUVD-2026-76978

A vulnerability was found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This affects the function doUpdateLicenseKey. The manipulation results in race condition. The attack can be launched remotely. The attack requires a high level of complexity. The exploitability is...

CVE-2026-90505

A race condition in the doUpdateLicenseKey function of vvbbnn00 WARP-Clash-API (up to commit c7bf2360073959861219b422e51ae86411051b46) can be triggered remotely. The attack requires low privileges but a high level of complexity , limiting practical exploitability to difficult . Impact is low acro...

CVE-2026-90505 vvbbnn00 WARP-Clash-API doUpdateLicenseKey race condition

A vulnerability was found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This affects the function doUpdateLicenseKey. The manipulation results in race condition. The attack can be launched remotely. The attack requires a high level of complexity. The exploitability is...

CVE-2026-90504 vvbbnn00 WARP-Clash-API authorized missing authentication

A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. The impacted element is the function authorized. The manipulation of the argument SECRETKEY leads to missing authentication. The attack can be initiated remotely. The exploit has been disclos...