CVE-2026-48683

FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vulnerability in the NetFlow v9 data flowset processor. In src/netflow_plugin/netflow_v9_collector.cpp, the Data template branch (lines 1695-1702) iterates over flow records without performing a per-iteration bounds check against the packet end pointer. In contrast, the Options template branch (lines 1709-1719) correctly checks 'if (pkt + offset + field_template->total_length > packet_end)' before each iteration. The Data branch omits this check entirely. Since template definitions are sent by the network peer (and are unauthenticated UDP), an attacker can craft templates that cause the parser to read arbitrary memory past the packet buffer. This can leak sensitive memory contents or cause a crash.

• CWE-125

• https://github.com/pavel-odintsov/fastnetmon
• https://github.com/pavel-odintsov/fastnetmon/blob/master/src/netflow_plugin/netflow_v9_collector.cpp
• https://lorikeetsecurity.com/blog/fastnetmon-cve-2026-48683-netflow-v9-data-oob

Published

May 26, 2026

Last Modified

Jul 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48619A flaw in Node.js HTTP/2 client allows a server to send an u…7.5
• CVE-2026-4862A security vulnerability has been detected in UTT HiPER 1250…8.8
• CVE-2026-4867Impact: A bad regular expression is generated any time you …7.5
• CVE-2026-4868GitLab has remediated an issue in GitLab EE affecting all ve…8.2
• CVE-2026-48681OpenStack Ironic through before 35.0.2 allows file overwrite…8.1
• CVE-2026-48682FastNetMon Community Edition through 1.2.9 contains an out-o…5.9
• CVE-2026-48684FastNetMon Community Edition through 1.2.9 contains an out-o…6.5
• CVE-2026-48685FastNetMon Community Edition through 1.2.9 has out-of-bounds…6.5
• CVE-2026-48686FastNetMon Community Edition through 1.2.9 contains a stack-…9.8
• CVE-2026-48687FastNetMon Community Edition through 1.2.9 contains an OS co…9.8
• CVE-2026-48688FastNetMon Community Edition through 1.2.9 contains multiple…7.5
• CVE-2026-48689FastNetMon Community Edition through 1.2.9 contains an off-b…9.8