CVE-2026-92697

Name of the Vulnerable Software and Affected Versions FastNetMon versions prior to 1.2.10

Description The NetFlow v9 collector uses the strlen() function on an attacker-controlled interface-description field without bounding the scan to the declared length of the field. If a field is accepted without a null terminator, it can lead to reads beyond the field and packet buffer. An unauthenticated remote attacker can exploit this by sending crafted UDP packets to the collector, triggering an out-of-bounds read that may crash the process and result in a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.