FastNetMon Community Edition through version 1.2.9 contains a buffer overflow vulnerability that, if exploited, could allow execution of arbitrary code on the host. The flaw arises in the handling of data by the ExaBGP module, a type of buffer overflow described by CWE-120. The description states the vulnerability exists, and yet the exact exploit path is not fully disclosed in the official CVE entry, so the potential impact is inferred from the nature of the vulnerability.

Open‑source deployments of FastNetMon Community Edition at or below version 1.2.9 are affected. Because the source code is hosted on GitHub, any installation of these versions in a network monitoring environment should be evaluated; there is no vendor‑specific distribution listed.

With a CVSS score of 6.2 the vulnerability is considered medium to high severity, and its EPSS score is not available. The CVE’s references and the description of an ExaBGP module imply that the overflow could be triggered remotely by sending crafted network messages to the FastNetMon process. No indication exists that the issue is catalogued in CISA’s KEV, so it is not known to be actively exploited in the wild.