CVE-2026-48697
HighCVSS 7.4Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections. The execute_web_request_secure() function fails to call set_verify_mode(verify_peer), so OpenSSL does not validate the server's certificate chain. This function is used for telemetry reporting, sending system information.
Risk Assessment
An attacker can perform a man-in-the-middle attack, intercepting and modifying telemetry data (CPU, kernel, traffic stats) or redirecting it to a malicious server.
Recommendation
Update FastNetMon Community Edition to version 1.2.10 or later, which includes the TLS verification fix.
Other vulnerabilities in FastNetMon Community Edition
See all- CVE-2026-48690High
In FastNetMon Community Edition up to 1.2.9, an integer overflow in the packet capture buffer allocation function allocate_buffer() leads to a smaller-than-expected buffer and subsequent heap corruption via out-of-bounds writes.
- CVE-2026-48683Medium
FastNetMon Community Edition through 1.2.9 has an out-of-bounds read vulnerability in the NetFlow v9 data flowset processor. The Data template branch iterates without bounds checking, while the Options template branch does. Since templates are sent via unauthenticated UDP, an attacker can craft templates to read memory past the packet buffer.
Original NVD description (English source)
FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections. The execute_web_request_secure() function in src/fast_library.cpp creates a boost::asio::ssl::context with tls_client mode and calls set_default_verify_paths() to load CA certificates, but never calls set_verify_mode(boost::asio::ssl::verify_peer). Without this call, OpenSSL performs the TLS handshake without validating the server's certificate chain, making all HTTPS connections vulnerable to man-in-the-middle attacks. This function is used for telemetry reporting to community-stats.fastnetmon.com, which sends system information including CPU model, kernel version, traffic statistics, and software configuration. An attacker can intercept and modify this data or redirect it to a malicious server.