CVE-2026-92698

waiting for further signals

GHSA-852r-3wcv-pjx2 ↗

no check availablenot proven exploitable

cve.orgpublic poc−108dkev

pavel-odintsov fastnetmon <= 1.2.9

CWE-125 Out-of-bounds Read

ETK-2026-3678, permanent identifier

cvss8.2cna vendorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

8h 35msince last run

44mAI analysis

timeline

0 = trigger signal

public poc−3.6motrigger signal (cve.org) +0mowaiting for further signals+0.0mo

−3mo

−2mo

−1mo

description

FastNetMon 1.2.9 and earlier are affected when the sFlow collector accepts network-reachable sFlow v5 UDP traffic. An unauthenticated attacker able to send that traffic can trigger an out-of-bounds read, potentially crashing the process and exposing limited adjacent data through flow fields.

mitigation

Restrict sFlow UDP input to trusted exporters and block untrusted network access to the collector. Monitor for a vendor release and upgrade when a fix is published.

check

exploit

automation

–

auth required

EPSS

–

agent run time

44m

cve.org record, t = 0

2026-11-05 22:35Z

Δ to public poc

−108d

Δ to kev

–

outcome

No artifact: an exploit or check was attempted but could not be produced at this moment.

source signals

Public signals that triggered or updated the pipeline. These are inputs for the deltas above.

2026-07-20 15:06Z
public poc
https://github.com/pavel-odintsov/fastnetmon/security/advisories/GHSA-852r-3wcv-pjx2
2026-11-05 22:35Z
cve_org: trigger signal, started the run
https://www.cve.org/CVERecord?id=CVE-2026-92698

this entry in the feed

GET /api/v1/feed/CVE-2026-92698

{
  "etk_id": "ETK-2026-3678",
  "cve_id": "CVE-2026-92698",
  "display_id": "CVE-2026-92698",
  "ghsa_id": "GHSA-852r-3wcv-pjx2",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "anchored",
  "title": "Out-of-bounds read in FastNetMon sFlow processing",
  "summary": "FastNetMon 1.2.9 and earlier are affected when the sFlow collector accepts network-reachable sFlow v5 UDP traffic. An unauthenticated attacker able to send that traffic can trigger an out-of-bounds read, potentially crashing the process and exposing limited adjacent data through flow fields.",
  "mitigation": "Restrict sFlow UDP input to trusted exporters and block untrusted network access to the collector. Monitor for a vendor release and upgrade when a fix is published.",
  "vendor": "pavel-odintsov",
  "product": "fastnetmon",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 1.2.9"
      ],
      "ecosystem": "package",
      "fixed_versions": [],
      "package_name": "fastnetmon",
      "purl": null
    }
  ],
  "cwes": [
    125
  ],
  "cvss_score": 8.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 44.2165805,
  "t0_at": "2026-11-05T22:35:58.969000+00:00",
  "signals": {
    "public_poc": {
      "at": "2026-07-20T15:06:23+00:00",
      "days": -108.31222186342593,
      "is_lower_bound": false,
      "measured_at": "2026-11-05T22:35:58.969000+00:00",
      "url": "https://github.com/pavel-odintsov/fastnetmon/security/advisories/GHSA-852r-3wcv-pjx2"
    },
    "trigger_signal": {
      "at": "2026-11-05T22:35:58.969000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-05T22:35:58.969000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-92698"
    }
  }
}

published 2026-11-05 23:12Z
last change 2026-11-06 00:01Z

Need the technical details behind an entry?

Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.