PT-2026-43271 · Unknown · Fastnetmon Community Edition

Published 2026-05-26 · Updated 2026-05-27 · CVE-2026-48684

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions FastNetMon Community Edition versions prior to 1.2.10

Description An out-of-bounds read exists in the NetFlow v9 options template parser. In the process netflow v9 options template() function, the scope parsing loop iterates until scopes offset reaches the attacker-controlled option scope length value without validating that the memory access remains within the flowset. A similar issue occurs in the options field loop involving option length. Additionally, option scope length is not verified to be a multiple of sizeof(netflow9 template flowset record t), which may lead to misaligned reads. This allows an attacker to trigger reads beyond the end of the UDP packet buffer.

Recommendations Update to version 1.2.10 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-48684

Affected Products

Fastnetmon Community Edition

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-48684 · Security Note
• https://github.com/pavel-odintsov/fastnetmon/blob/master/src/netflow_plugin/netflow_v9_collector.cpp · Note
• https://github.com/pavel-odintsov/fastnetmon · Note
• https://lorikeetsecurity.com/blog/fastnetmon-cve-2026-48684-netflow-v9-options-oob · Note
• https://t.me/cveNotify/164760 · Telegram Post
• https://twitter.com/dailycve/status/2059688786347405761 · Twitter Post
• https://i.redd.it/3dwfot8acp3h1.png · Reddit Post