Is CVE-2026-48692 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-48692 being exploited in the wild.

How severe is CVE-2026-48692?

Informational severity, with a CVSS score of 8.1, published 26 May 2026.

Which products and versions are affected?

FastNetMon FastNetMon Community Edition through 1.2.9.

Is there a fix for CVE-2026-48692?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-48692 attacked?

It is attacked with local access or over the network, in a network appliance.

Am I affected by CVE-2026-48692?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-48692: FastNetMon Community Edition missing authentication in gRPC API

CVE-2026-48692 · Severity: info · CVSS 8.1 · Published 2026-05-26

FastNetMon Community Edition, a DDoS detection and mitigation tool, contains a management interface that does not require a password or any form of authentication. This allows anyone with access to the management port to block legitimate internet traffic, disable active DDoS protections, or execute unauthorized scripts on the server. While restricted to the local server by default, any configuration changes to allow remote management expose the system to significant risk of service outages and network disruption.

Quick answers

Is CVE-2026-48692 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-48692 being exploited in the wild.
How severe is CVE-2026-48692?: Informational severity, with a CVSS score of 8.1, published 26 May 2026.
Which products and versions are affected?: FastNetMon FastNetMon Community Edition through 1.2.9.
Is there a fix for CVE-2026-48692?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-48692 attacked?: It is attacked with local access or over the network, in a network appliance.
Am I affected by CVE-2026-48692?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The gRPC API server in FastNetMon Community Edition (through v1.2.9) is initialized using 'grpc::InsecureServerCredentials()' in 'src/fastnetmon.cpp', explicitly bypassing authentication. None of the RPC methods defined in 'src/api.cpp'—including ExecuteBan, ExecuteUnBan, and GetBanlist—perform credential verification or implement role-based access control. An attacker with access to the gRPC port (defaulting to localhost but often reconfigured to 0.0.0.0 for remote management) can trigger BGP blackhole announcements to drop traffic for arbitrary IP addresses, disable existing mitigations, or trigger external notification scripts via popen(). As of the advisory date, no official patch has been released, and the vulnerability is inherent to the current design of the Community Edition's API.

Affected products

FastNetMon FastNetMon Community Edition through 1.2.9

Timeline

2026-04-25: other: Vendor notified by Lorikeet Security
2026-05-26: advisory: Vulnerability disclosed by Lorikeet Security and published in NVD

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.