Skip to content
OpenAdvisories
Critical USN-8429-1 5 CVEs

fastnetmon vulnerabilities

Published Jun 15, 2026 · Updated Jun 16, 2026

Ecosystem: Ubuntu

Summary

It was discovered that FastNetMon incorrectly validated prefix lengths when
decoding BGP NLRI data. A remote attacker could possibly use this issue to
cause a denial of service or execute arbitrary code. This issue only
affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-48686)

It was discovered that FastNetMon incorrectly sanitized input in the
Juniper router integration plugin. An attacker could possibly use this
issue to execute arbitrary commands. (CVE-2026-48687)

It was discovered that FastNetMon incorrectly handled buffer bounds checks
when processing network traffic. A remote attacker could possibly use this
issue to cause a denial of service or execute arbitrary code. This issue
only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-48689)

It was discovered that FastNetMon incorrectly handled encoding the BGP
AS_PATH attribute. A remote attacker could possibly use this issue to cause
a denial of service or execute arbitrary code. This issue only affected
Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-48691)

It was discovered that FastNetMon incorrectly validated IP address input in
the Juniper router integration plugin. An attacker could possibly use this
issue to inject arbitrary router configuration commands. (CVE-2026-48694)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS fastnetmon 1.1.4-1ubuntu0.1~esm1
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS fastnetmon 1.2.6-1ubuntu0.1~esm1
Ubuntu · Pro 26.04 LTS Pro:26.04:LTS fastnetmon 1.2.8+git20250911-2ubuntu0.1~esm1

Vulnerabilities 5

References

  • report
    https://ubuntu.com/security/CVE-2026-48686
  • report
    https://ubuntu.com/security/CVE-2026-48687
  • report
    https://ubuntu.com/security/CVE-2026-48689
  • report
    https://ubuntu.com/security/CVE-2026-48691
  • report
    https://ubuntu.com/security/CVE-2026-48694