CVE-2022-26987: Fastcom FAC1900R Firmware

High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days.

TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MmtAtePrase` function. Local users could get remote code execution.

Affected products

• Fastcom FAC1900R Firmware: version 20190827_2.0.2 only
• Mercusys Mercury d196g Firmware: version 20200109_2.0.4 only
• TP-Link Tl-WDR5660 Firmware: affected versions not specified
• TP-Link Tl-WDR7620 Firmware: affected versions not specified
• TP-Link Tl-WDR7660 Firmware: version 2.0.30 only
• TP-Link Tl-WDR7661 Firmware: affected versions not specified

Published 2022-05-10. Last modified 2026-07-09.