CVE-2026-92698

Name of the Vulnerable Software and Affected Versions FastNetMon versions prior to 1.2.10

Description The process sflow flow sample() function in src/sflow plugin/sflow collector.cpp passes the sflow raw protocol header t.header size variable to parse raw packet to simple packet full() as a trusted captured length without verifying it against the remaining bytes in the record. An attacker can provide an inflated header size to create a false end pointer beyond the sFlow v5 UDP buffer, bypassing bounds checks. This leads to an unauthenticated remote out-of-bounds read, which can cause the process to crash and potentially expose adjacent bytes through parsed flow fields.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.