CVE catalog

CVE-2026-48694

FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integration plugin. In src/juniper_plugin/fastnetmon_juniper.php, the $IP_ATTACK varia

[CVE catalog]

Severity
High · CVSS 8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.23% · Oct 25, 2026

FastNetMon Community Edition through 1.2.9 contains a configuration injection vulnerability in the Juniper router integration plugin. In src/juniper_plugin/fastnetmon_juniper.php, the $IP_ATTACK variable (received from argv[1]) is directly interpolated into Juniper NETCONF set-configuration commands at lines 69 and 90 without any validation or sanitization. Line 69: $conn->load_set_configuration("set routing-options static route {$IP_ATTACK} community 65535:666 discard"). Line 90: $conn->load_set_configuration("delete routing-options static route {$IP_ATTACK}/32"). An attacker who can control the IP address string can inject additional Juniper CLI configuration commands by embedding newline characters followed by arbitrary set/delete commands. This could modify the router's routing table, firewall filters, user accounts, or any other configuration element accessible via NETCONF. The impact is full router compromise.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfastnetmonsid1.2.9-1fixed
Debianfastnetmonforky1.2.9-1fixed
Debianfastnetmontrixie1.2.9-0+deb13u1fixed
Debianfastnetmontrixie-security1.2.9-0+deb13u1fixed
Debianfastnetmonbookworm1.2.4-2+deb12u1vulnerable
Debianfastnetmonbookworm-security1.2.4-2+deb12u1vulnerable
CpefastnetmonNot reportedNot reportedvulnerable
CpefastnetmonNot reportedNot reportedunknown

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfastnetmonsourcesid1.2.9-1unimportantNot reported[1138646]
Debianfastnetmonsourceforky1.2.9-1unimportantNot reported[1138646]
Debianfastnetmonsourcetrixie1.2.9-0+deb13u1not yet assignedNot reported[1138646]
Debianfastnetmonsourcebookworm(unfixed)unimportantNot reported[1138646]

[Debian bug #1138646]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [fastnetmon]Affected
    Details (6)

    • 1.2.4-2+deb12u1 · amd64 · bookworm

      Affected

      nvd · fastnetmon · debian · bookworm; nvd · fastnetmon · debian · 12

    • 1.2.4-2+deb12u1 · arm64 · bookworm

      Affected

      nvd · fastnetmon · debian · bookworm; nvd · fastnetmon · debian · 12

    • 1.2.8-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · fastnetmon · debian · bookworm; nvd · fastnetmon · debian · 12

    • 1.2.8-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · fastnetmon · debian · bookworm; nvd · fastnetmon · debian · 12

    • 1.2.4-2+deb12u1 · amd64 · bookworm-security

      Affected

      nvd · fastnetmon · debian · bookworm; nvd · fastnetmon · debian · 12

    • 1.2.4-2+deb12u1 · arm64 · bookworm-security

      Affected

      nvd · fastnetmon · debian · bookworm; nvd · fastnetmon · debian · 12

[Debian 13 (Trixie)]

  • [fastnetmon]Fixed
    Details (4)

    • 1.2.9-0+deb13u1 · amd64 · trixie

      Fixed · Fixed: 1.2.9-0+deb13u1

      nvd · fastnetmon · debian · 13

    • 1.2.9-0+deb13u1 · arm64 · trixie

      Fixed · Fixed: 1.2.9-0+deb13u1

      nvd · fastnetmon · debian · 13

    • 1.2.9-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.2.9-0+deb13u1

      nvd · fastnetmon · debian · 13

    • 1.2.9-0+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 1.2.9-0+deb13u1

      nvd · fastnetmon · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]