CVE-2026-48687

FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin. The _log() function in src/juniper_plugin/fastnetmon_juniper.php (lines 117-118) constructs shell commands by concatenating the $msg parameter directly into exec() calls: exec("echo `date` \"- {FASTNETMON] - " . $msg . " \" >> " . $FILE_LOG_TMP). The $msg variable contains unsanitized data derived from command-line arguments argv[1] through argv[3], which represent the attack IP address, direction, and power. While FastNetMon's C++ core currently passes IP addresses via inet_ntoa() (which only produces safe dotted-decimal notation), the PHP script performs no input validation or shell escaping. If the script is invoked directly, by another orchestration system, or if future code changes pass string-sourced IPs, arbitrary commands can be injected. The correct fix is to replace exec() with file_put_contents() or use escapeshellarg() on all parameters.

• CWE-78
• CWE-78

• https://github.com/pavel-odintsov/fastnetmonProduct
• https://github.com/pavel-odintsov/fastnetmon/blob/master/src/juniper_plugin/fastnetmon_juniper.phpProduct
• https://lorikeetsecurity.com/blog/fastnetmon-cve-2026-48687-juniper-cmd-injectionExploit, Third Party Advisory

Published

May 26, 2026

Last Modified

Jul 21, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48681OpenStack Ironic through before 35.0.2 allows file overwrite…8.1
• CVE-2026-48682FastNetMon Community Edition through 1.2.9 contains an out-o…5.9
• CVE-2026-48683FastNetMon Community Edition through 1.2.9 contains an out-o…6.5
• CVE-2026-48684FastNetMon Community Edition through 1.2.9 contains an out-o…6.5
• CVE-2026-48685FastNetMon Community Edition through 1.2.9 has out-of-bounds…6.5
• CVE-2026-48686FastNetMon Community Edition through 1.2.9 contains a stack-…9.8
• CVE-2026-48688FastNetMon Community Edition through 1.2.9 contains multiple…7.5
• CVE-2026-48689FastNetMon Community Edition through 1.2.9 contains an off-b…9.8
• CVE-2026-48690FastNetMon Community Edition through 1.2.9 contains an integ…7.1
• CVE-2026-48691FastNetMon Community Edition through 1.2.9 contains an integ…9.8
• CVE-2026-48692FastNetMon Community Edition through 1.2.9 exposes a gRPC AP…8.1
• CVE-2026-48693FastNetMon Community Edition through 1.2.9 is vulnerable to …5.5