https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 17:58:59 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-48695 <p>FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin. The _log() function in src/mikrotik_plugin/fastnetmon_mikrotik.php (lines 107-108) constructs shell commands by concatenating the $msg parameter directly into exec() calls: exec(&#34;echo `date` \&#34;- {FASTNETMON] - &#34; . $msg . &#34; \&#34; &gt;&gt; &#34; . $FILE_LOG_TMP). This is identical in pattern to the Juniper plugin vulnerability. The $msg variable contains unsanitized attack data from command-line arguments. An attacker who can influence argv[] values can inject arbitrary shell commands. The fix is to replace exec() with file_put_contents() or use escapeshellarg().</p> <p>FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin. The _log() function in src/mikrotik_plugin/fastnetmon_mikrotik.php (lines 107-108) constructs shell commands by concatenating the $msg parameter directly into exec() calls: exec(&#34;echo `date` \&#34;- {FASTNETMON] - &#34; . $msg . &#34; \&#34; &gt;&gt; &#34; . $FILE_LOG_TMP). This is identical in pattern to the Juniper plugin vulnerability. The $msg variable contains unsanitized attack data from command-line arguments. An attacker who can influence argv[] values can inject arbitrary shell commands. The fix is to replace exec() with file_put_contents() or use escapeshellarg().</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-48695 https://vulnerability.circl.lu/vuln/ghsa-vh5g-h8jm-q2cw <p>FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin. The _log() function in src/mikrotik_plugin/fastnetmon_mikrotik.php (lines 107-108) constructs shell commands by concatenating the $msg parameter directly into exec() calls: exec(&#34;echo `date` \&#34;- {FASTNETMON] - &#34; . $msg . &#34; \&#34; &gt;&gt; &#34; . $FILE_LOG_TMP). This is identical in pattern to the Juniper plugin vulnerability. The $msg variable contains unsanitized attack data from command-line arguments. An attacker who can influence argv[] values can inject arbitrary shell commands. The fix is to replace exec() with file_put_contents() or use escapeshellarg().</p> <p>FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin. The _log() function in src/mikrotik_plugin/fastnetmon_mikrotik.php (lines 107-108) constructs shell commands by concatenating the $msg parameter directly into exec() calls: exec(&#34;echo `date` \&#34;- {FASTNETMON] - &#34; . $msg . &#34; \&#34; &gt;&gt; &#34; . $FILE_LOG_TMP). This is identical in pattern to the Juniper plugin vulnerability. The $msg variable contains unsanitized attack data from command-line arguments. An attacker who can influence argv[] values can inject arbitrary shell commands. The fix is to replace exec() with file_put_contents() or use escapeshellarg().</p> https://vulnerability.circl.lu/vuln/ghsa-vh5g-h8jm-q2cw https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-48695 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: fastnetmon, Ubuntu:Pro:20.04:LTS: fastnetmon, Ubuntu:Pro:24.04:LTS: fastnetmon, Ubuntu:25.10: fastnetmon, Ubuntu:Pro:26.04:LTS: fastnetmon</p> <p>FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin. The _log() function in src/mikrotik_plugin/fastnetmon_mikrotik.php (lines 107-108) constructs shell commands by concatenating the $msg parameter directly into exec() calls: exec(&#34;echo `date` \&#34;- {FASTNETMON] - &#34; . $msg . &#34; \&#34; &gt;&gt; &#34; . $FILE_LOG_TMP). This is identical in pattern to the Juniper plugin vulnerability. The $msg variable contains unsanitized attack data from command-line arguments. An attacker who can influence argv[] values can inject arbitrary shell commands. The fix is to replace exec() with file_put_contents() or use escapeshellarg().</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: fastnetmon, Ubuntu:Pro:20.04:LTS: fastnetmon, Ubuntu:Pro:24.04:LTS: fastnetmon, Ubuntu:25.10: fastnetmon, Ubuntu:Pro:26.04:LTS: fastnetmon</p> <p>FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin. The _log() function in src/mikrotik_plugin/fastnetmon_mikrotik.php (lines 107-108) constructs shell commands by concatenating the $msg parameter directly into exec() calls: exec(&#34;echo `date` \&#34;- {FASTNETMON] - &#34; . $msg . &#34; \&#34; &gt;&gt; &#34; . $FILE_LOG_TMP). This is identical in pattern to the Juniper plugin vulnerability. The $msg variable contains unsanitized attack data from command-line arguments. An attacker who can influence argv[] values can inject arbitrary shell commands. The fix is to replace exec() with file_put_contents() or use escapeshellarg().</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-48695