Skip to content
OpenAdvisories

Vendor

ntop

12 known vulnerabilities.

ntop at a glance

Last 12 months
11
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 1 vulnerability June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 7 vulnerabilities Sep October 2026: 1 vulnerability November 2026: 2 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202620
Oct 202610
Sep 202670
Aug 202600
Jul 202600
Jun 202600
May 202610
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202510
Jan 202500
Dec 202400

Products

ntopng 9 nDPI 3
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Medium 5.3
    CVE-2026-97371

    ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets

    ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpi_get_custom_category_match writes a four-byte nDPI protocol-category value through a pointer to the two-byte id variable in IpAddress::reloadBlacklist in src/IpAddress.cpp …

    ntop ntopng ntopng Ubuntu
  • High 8.8
    CVE-2026-82413

    ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`)

    ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, scripts/lua/rest/v2/add/host/to_scan.lua and scripts/lua/rest/v2/exec/host/schedule_vulnerability_scan.lua accept scan_ports from any authenticated session, including non-admin…

    ntop ntopng ntopng Ubuntu
  • Medium 5.3
    CVE-2026-116744

    ntop nDPI through 6.0 Out-of-Bounds Read in SoftEther Dissector

    ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that compares host_name using the consumed byte count instead of data length. Remote attackers can send crafted short UDP datagrams on already-c…

    ntop nDPI ndpi ndpi Debian Ubuntu
  • High 8.8
    CVE-2026-84990

    ntopng: Missing Authorization on System Configuration Backup Download and Listing

    ntopng is a web-based network traffic monitoring application. Prior to 6.7.260718, scripts/lua/rest/v2/get/system/configurations/list_available_backups.lua and scripts/lua/rest/v2/get/system/configurations/download_backup.lua allow any authenticated non-admin…

    ntop ntopng ntopng Ubuntu
  • High 8.1
    CVE-2026-83621

    ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs

    ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, POST /lua/rest/v2/edit/system/edit_blacklist.lua in scripts/lua/rest/v2/edit/system/edit_blacklist.lua lacks an administrator check and calls lists_utils.editList for any authe…

    ntop ntopng ntopng Ubuntu
  • High 8.8
    CVE-2026-82412

    ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API

    ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, the vulnerability-scan endpoints scripts/lua/rest/v2/add/host/to_scan.lua and scripts/lua/rest/v2/exec/host/schedule_vulnerability_scan.lua accept the scan_ports parameter with…

    ntop ntopng ntopng Ubuntu
  • High 7.4
    CVE-2026-86098

    ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape

    ntop nDPI versions before 6.0 contain a heap buffer overflow vulnerability in the ndpi_json_string_escape function that writes beyond caller-supplied buffer boundaries. Attackers can trigger the overflow by supplying crafted network packet data including TLS …

    ntop nDPI ndpi ndpi Debian Ubuntu
  • High 7.1
    CVE-2026-86091

    ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler

    ntopng before 6.7.260717 fails to check user privileges in the pools bulk-delete endpoint, allowing authenticated non-administrators to delete all host pools and member bindings. Attackers can issue POST requests to the delete pools endpoint to irreversibly d…

    ntop ntopng ntopng Ubuntu
  • High 7.1
    CVE-2026-86090

    ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers

    ntopng before 6.7.260717 fails to perform authorization checks in the delete endpoints and recipients REST v2 handlers. Authenticated non-administrator users can issue POST requests to irreversibly delete all configured notification endpoints and recipients, …

    ntop ntopng ntopng Ubuntu
  • High 7.1
    CVE-2026-84989

    ntopng's Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary Tags

    ntopng is a web-based network traffic monitoring application. In versions 6.7.0 through 6.7.260717, two REST v2 endpoints that manage ntopng's tag/badge feature — `POST /lua/rest/v2/delete/tag/tag.lua` and `POST /lua/rest/v2/edit/tag/tag.lua` — perform no aut…

    ntop ntopng ntopng Ubuntu
  • Medium 4.3
    CVE-2026-45448

    ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

    CWE-601 URL redirection to untrusted site ('open redirect')

    ntop ntopng ntopng Ubuntu
  • High 8.1
    CVE-2025-25066

    nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c.

    ntop nDPI ndpi Ubuntu