Nntop

Products

Exploited and recent CVEs

• CVE-2026-97371 Medium 5.3 ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets 0.5%
• CVE-2026-82413 High 8.8 ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`) 1.1%
• CVE-2026-116744 Medium 5.3 ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector 0.4%
• CVE-2026-84990 High 8.8 ntopng: Missing Authorization on System Configuration Backup Download and Listing 0.3%
• CVE-2026-83621 High 8.1 ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs 0.5%
• CVE-2026-82412 High 8.8 ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API 0.7%
• CVE-2026-86098 High 7.4 ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape 0.6%
• CVE-2026-86091 High 7.1 ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler 0.5%
• CVE-2026-86090 High 7.1 ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers 0.5%
• CVE-2026-84989 High 7.1 ntopng's Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary Tags 0.4%
• CVE-2026-45448 Medium 4.3 ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') 0.2%
• CVE-2025-25066 High 8.1 nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c. 0.2%