ntop vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202611

Newest CVEs

• CVE-2026-97371

  ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets

  ntop · ntopng

  Medium5.3
• CVE-2026-82413

  ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`)

  ntop · ntopng

  High8.8
• CVE-2026-116744

  ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector

  ntop · nDPI

  Medium6.9
• CVE-2026-84990

  ntopng: Missing Authorization on System Configuration Backup Download and Listing

  ntop · ntopng

  High8.8
• CVE-2026-83621

  ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs

  ntop · ntopng

  High8.1
• CVE-2026-82412

  ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API

  ntop · ntopng

  High8.8
• CVE-2026-86098

  ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape

  ntop · nDPI

  High8.3
• CVE-2026-86091

  ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler

  ntop · ntopng

  High7.1
• CVE-2026-86090

  ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers

  ntop · ntopng

  High7.1
• CVE-2026-84989

  ntopng's Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary Tags

  ntop · ntopng

  High7.1