CVE-2026-92693

Name of the Vulnerable Software and Affected Versions FastNetMon versions prior to 1.2.10

Description An unauthenticated remote out-of-bounds read exists when the parse raw packet to simple packet full() function in src/simple packet parser ng.cpp dereferences ipv6 extension header fragment t without verifying the presence of the eight-byte Fragment header when IpProtocolNumberIPV6 FRAG is present. This can be triggered by a crafted sFlow v5 RAW PACKET HEADER record with omitted Fragment bytes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.