CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-48686 — FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflo...

·Source: NIST NVD

Updated:

Executive Summary

FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) decoder. The function decode_bgp_subnet_encoding_ipv4_raw() in src/bgp_protocol.cpp reads prefix_bit_length directly from the BGP packet (line 99) without validating it is <= 32 for IPv4 prefixes. This value is passed to how_much_bytes_we_need_for_storing_certa

Analysis

FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information) decoder. The function decode_bgp_subnet_encoding_ipv4_raw() in src/bgp_protocol.cpp reads prefix_bit_length directly from the BGP packet (line 99) without validating it is 32 causes undefined behavior. CVSS Score: 9.8. Published: 2026-05-26T16:16:26.693.

Indicators of Compromise (1)

CVE (1)
CVE-2026-48686
Source Attribution

Originally published by NIST NVD on May 26, 2026. Verified by: NIST.

Related Threats