CVE-2026-92694

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top-talkers screen-draw thread in draw table ipv6() in src/fastnetmon logic.cpp iterates ipv6 host counters.average speed map without holding counter map mutex while recalculate speed() inserts new keys and may rehash the same map. The race requires networks list to include the targeted IPv6 range. It causes confirmed undefined behavior under load; a process crash is plausible but was not observed, so reliable denial of service has not been established. No fixed release is available as of this review.