Read the docs
TI-2026-35977 Aliases CVE-2026-48692GHSA-w743-79pp-vx63

FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with…

Priority LOW 37CWE-306Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-306.

Summary

FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism. The server is initialized with grpc::InsecureServerCredentials() (src/fastnetmon.cpp line 477) and a source code comment explicitly acknowledges 'Listen on the given address without any authentication mechanism.' None of the RPC methods in src/api.cpp (ExecuteBan, ExecuteUnBan, GetBanlist, GetTotalTrafficCounters, etc.) perform any credential verification. The ExecuteBan and ExecuteUnBan methods trigger security-critical actions: BGP route announcements that can blackhole network traffic, and execution of external notification scripts via popen(). An attacker with local network access can ban arbitrary IP addresses (causing denial of service to legitimate traffic), unban active attacks (disabling DDoS mitigation), and trigger script execution. There is also no role-based access control separating read-only monitoring from destructive administrative operations.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00233 14th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:pavel-odintsov:fastnetmon:*:*:*:*:community:*:*:*up to 1.2.9Vulnerablepavel-odintsov
  • cpe:2.3:a:pavel-odintsov:fastnetmon:*:*:*:*:community:*:*:* Versions up to 1.2.9 Vulnerable ·pavel-odintsov

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-48692
  2. 2026-10-03 Alias added: GHSA-w743-79pp-vx63

References

Advisory 1

Other 3

  • TI-2026-35974 FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer… CVSS 3.1CRITICAL 9.8
  • TI-2026-35971 FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the… CVSS 3.1CRITICAL 9.8
  • TI-2026-35976 FastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP… CVSS 3.1CRITICAL 9.8
  • TI-2026-35972 FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability… CVSS 3.1CRITICAL 9.8
  • TI-2024-37109 An issue was discovered in FastNetMon Community Edition through 1.2.7. CVSS 3.1HIGH 7.5
  • TI-2024-37108 An issue was discovered in FastNetMon Community Edition through 1.2.7. CVSS 3.1HIGH 7.5
See all 15 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences