Threats Tagged 'cve-2026-48689'

FastNetMon Community Edition up to version 1.2.9 contains a critical off-by-one heap-based buffer overflow in the dynamic_binary_buffer_t class due to an incorrect bounds check in several methods. This flaw allows writing one byte beyond the allocated heap buffer, which can be triggered by sending crafted network traffic such as NetFlow, sFlow, IPFIX, or BGP messages. Exploitation could lead to arbitrary code execution by corrupting heap metadata. The vulnerability has a CVSS score of 9.8, indicating high severity. No official patch or remediation guidance is currently available from the vendor. Users should monitor vendor advisories for updates and consider mitigating exposure to untrusted network traffic until a fix is released.