Skip to content
Threat Feed
Subscribe

Vendor

Ntop

1 brief RSS
high threat

CVE-2026-38968: ntopng Predictable Session Identifier Vulnerability Leading to Session Hijacking

CVE-2026-38968 affects ntopng versions up to 6.6, enabling session hijacking through predictable session identifiers generated with weak time-seeded pseudo-randomness in `src/HTTPserver.cpp`, allowing attackers to gain unauthorized access to legitimate user sessions.

exploited ntopng through 6.6 session-hijacking vulnerability ntopng network-monitoring
1c