CVE-2026-48697 Security feature bypass in n/a
FastNetMon fails to validate TLS certificates, allowing attackers to intercept telemetry data via man-in-the-middle attacks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-48697?
CVE-2026-48697 is a high-severity vulnerability in n/a, published on 26 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections. The execute_web_request_secure() function in src/fast_library.cpp creates a boost::asio::ssl::context with tls_client mode and calls set_default_verify_paths() to load CA certificates, but never calls set_verify_mode(boost::asio::ssl::verify_peer). Without this call, OpenSSL performs the TLS handshake without validating the server's certificate chain, making all HTTPS connections vulnerable to man-in-the-middle attacks. This function is used for telemetry reporting to community-stats.fastnetmon.com, which sends system information including CPU model, kernel version, traffic statistics, and software configuration. An attacker can intercept and modify this data or redirect it to a malicious server.
Weakness: CWE-295
Which versions are affected by CVE-2026-48697?
It affects 1 product.
Products include Pavel-Odintsov Fastnetmon.
How do I fix CVE-2026-48697?
No fix has been published for CVE-2026-48697 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-48697 being exploited?
There is no known exploitation of CVE-2026-48697 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2026-48697, GHSA-vw83-prmh-h2qc, UBUNTU-CVE-2026-48697.