ntop ntopng

• CVE-2026-97371 Medium 5.3 ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets 0.5%
• CVE-2026-82413 High 8.8 ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`) 1.1%
• CVE-2026-84990 High 8.8 ntopng: Missing Authorization on System Configuration Backup Download and Listing 0.3%
• CVE-2026-83621 High 8.1 ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs 0.5%
• CVE-2026-82412 High 8.8 ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API 0.7%
• CVE-2026-86091 High 7.1 ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler 0.5%
• CVE-2026-86090 High 7.1 ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers 0.5%
• CVE-2026-84989 High 7.1 ntopng's Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary Tags 0.4%
• CVE-2026-45448 Medium 4.3 ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') 0.2%