Race Condition in FastNetMon DDoS Detector Affecting IPv6 Handling
CVE-2026-92694

5.9MEDIUM

Key Information:

Vendor

Pavel-odintsov

Status
Fastnetmon
Vendor
CVE Published:
5 November 2026

What is CVE-2026-92694?

FastNetMon, a high-performance DDoS detector, has a race condition in its IPv6 handling code. The issue arises in the draw_table_ipv6() function, where the average_speed_map is accessed without appropriate synchronization, allowing for potential undefined behavior under heavy load conditions. Although a process crash has not been confirmed, the vulnerability may lead to unreliable service interruptions. As of now, no patched version has been released to address this issue.

Affected Version(s)

fastnetmon <= 1.2.9

References

https://github.com/pavel-odintsov/fastnetmon/security/adv...
x_refsource_CONFIRM
https://github.com/pavel-odintsov/fastnetmon/pull/1087
x_refsource_MISC
https://github.com/pavel-odintsov/fastnetmon/commit/12947...
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.