{"affected":[{"product":"fastnetmon","source":"CNA: GitHub_M","vendor":"pavel-odintsov","versions":[{"status":"affected","version":"<= 1.2.9"}]}],"cveId":"CVE-2026-92694","cwes":["CWE-362"],"description":"FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top-talkers screen-draw thread in draw_table_ipv6() in src/fastnetmon_logic.cpp iterates ipv6_host_counters.average_speed_map without holding counter_map_mutex while recalculate_speed() inserts new keys and may rehash the same map. The race requires networks_list to include the targeted IPv6 range. It causes confirmed undefined behavior under load; a process crash is plausible but was not observed, so reliable denial of service has not been established. No fixed release is available as of this review.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.9,"severity":"medium","source":"CNA: GitHub_M","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1793917766943,"publishedAt":1793917766943,"references":[{"source":"CNA: GitHub_M","tags":["x_refsource_CONFIRM"],"url":"https://github.com/pavel-odintsov/fastnetmon/security/advisories/GHSA-phrw-2q76-5m7h"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/pavel-odintsov/fastnetmon/pull/1087"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/pavel-odintsov/fastnetmon/commit/1294724ea931dc78fe545360f2193398bba35381"}],"remediation":[],"revision":"686c8239301fddc968807666a9582035f1b51645fcfa28ccf86c018e77e359b7","sources":[{"modifiedAt":1793917766943,"name":"CNA: GitHub_M","retrievedAt":1793920187901,"url":"https://www.cve.org/CVERecord?id=CVE-2026-92694"}],"ssvc":null,"status":"published","title":"FastNetMon: IPv6 host counters map iterated without lock, racing concurrent inserts","updatedAt":1793920187901}