CVE-2026-93424

Name of the Vulnerable Software and Affected Versions FastNetMon versions prior to 1.2.10

Description A heap-use-after-free issue exists where the peer find template() function in src/netflow plugin/netflow collector.cpp and src/netflow plugin/netflow v9 collector.cpp returns a pointer into global netflow9 templates after releasing the cache mutex. In environments with two or more entries in netflow ports, concurrent template redefinition and data-flowset processing allow the add update peer template() function to reassign the template and free its records vector while another listener dereferences the escaped pointer. An unauthenticated sender capable of reaching both NetFlow/IPFIX listener ports can trigger this condition to cause a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.