16 CVEs disclosed in FastNetMon Community Edition 1.2.9 - two critical RCE, command injection, hardcoded credentials, and unauthenticated APIs. Full breakdown....
May 30, 2026 · 18 min read →Blog
Attack postmortems.
Engineering deep-dives.
Practical guides from engineers who've been DDoS'd and learned from it.
All
Post-Mortem
Attack Analysis
Original Research
Engineering
Forensics
Integrations
Mitigations
Fundamentals
Tools
Comparisons
Get attack analysis in your inbox
Monthly postmortems, detection techniques, and original research. No fluff.
Original Research
FastNetMon CVEs: 16 Vulnerabilities in Community Edition (2026)
Original Research
CVE-2026-48695: FastNetMon MikroTik Command Injection
CVE-2026-48695: OS command injection and hardcoded api/api123 credentials in FastNetMon's MikroTik plugin. CVSS 8.1. Full technical analysis...
May 30, 2026 · 8 min read →
Original Research
CVE-2026-48687: FastNetMon Juniper Command Injection
CVE-2026-48687: OS command injection in FastNetMon's Juniper plugin logging function. Attacker-controlled data executes shell commands as ro...
May 30, 2026 · 7 min read →
Original Research
CVE-2026-48694: FastNetMon Juniper NETCONF Injection
CVE-2026-48694: configuration injection in FastNetMon's Juniper plugin allows full router compromise via NETCONF. CVSS 8.1....
May 30, 2026 · 8 min read →
Original Research
CVE-2026-48696: FastNetMon ExaBGP sprintf Overflow
CVE-2026-48696: stack buffer overflow in FastNetMon's ExaBGP action handler. A 256-byte sprintf buffer overflows with long community strings...
May 30, 2026 · 7 min read →
Original Research
CVE-2026-48692: FastNetMon gRPC API with No Authentication
CVE-2026-48692: FastNetMon's gRPC API runs without authentication. Any local process can trigger IP bans and withdraw mitigations. CVSS 8.1....
May 30, 2026 · 8 min read →
Original Research
CVE-2026-48697: FastNetMon Missing TLS Validation
CVE-2026-48697: FastNetMon skips TLS certificate verification on telemetry connections. Any MITM can intercept infrastructure data. CVSS 7.4...
May 30, 2026 · 7 min read →
Original Research
FastNetMon NetFlow Parser Vulnerabilities: 3 OOB Read Bugs
Three out-of-bounds read vulnerabilities in FastNetMon's NetFlow v9 and IPv4 parsers. CVE-2026-48683, CVE-2026-48684, CVE-2026-48682. All CV...
May 30, 2026 · 10 min read →
Original Research
FastNetMon BGP Parser Vulnerabilities: 4 Overflow and Corruption Bugs
Four BGP parser vulnerabilities in FastNetMon CE including a critical 9.8 CVSS stack overflow. CVE-2026-48686, CVE-2026-48685, CVE-2026-4868...
May 30, 2026 · 12 min read →
Original Research
FastNetMon Memory Safety Bugs: Off-by-One, Integer Overflow, and Symlink Race
Three memory safety and file handling vulnerabilities in FastNetMon CE, including a critical 9.8 CVSS off-by-one heap overflow. CVE-2026-486...
May 30, 2026 · 10 min read →
Original Research
CVE-2024-45163: How our team discovered a kill switch in the Mirai botnet
A critical 9.1 CVSS vulnerability in Mirai's CNC server allows remote denial of service without authentication. Full technical breakdown of ...
Jan 6, 2026 · 12 min read →