CVE-2026-48687

Name of the Vulnerable Software and Affected Versions FastNetMon Community Edition versions prior to 1.3.0

Description An OS command injection issue exists in the Juniper router integration plugin. The log() function in src/juniper plugin/fastnetmon juniper.php constructs shell commands by concatenating the $msg parameter directly into exec() calls. The $msg variable contains unsanitized data derived from command-line arguments argv[1] through argv[3], which represent the attack IP address, direction, and power. Because the PHP script lacks input validation or shell escaping, arbitrary commands can be injected if the script is invoked directly, by another orchestration system, or if string-sourced IPs are passed.

Recommendations For versions prior to 1.3.0, replace the exec() function with file put contents() or apply escapeshellarg() to all parameters. As a temporary mitigation, restrict direct access to the src/juniper plugin/fastnetmon juniper.php script.