Skip to content
Threat Feed
Subscribe

Vendor

Ntop

3 briefs RSS
high advisory

Heap Buffer Overflow in ntop nDPI

Versions of ntop nDPI before 6.0 are vulnerable to a heap-based buffer overflow in the ndpi_json_string_escape function, allowing attackers to trigger memory corruption via crafted network traffic.

nDPI vulnerability remote-code-execution network-security
1t 1c
high advisory

Authorization Bypass in ntopng REST v2 Handlers

An authorization bypass vulnerability in ntopng prior to version 6.7.260717 allows authenticated non-administrator users to delete notification endpoints and recipients, disrupting alerting services.

ntopng web-application authentication-bypass denial-of-service vulnerability authorization-bypass
2r 2t 1c
high threat

CVE-2026-38968: ntopng Predictable Session Identifier Vulnerability Leading to Session Hijacking

CVE-2026-38968 affects ntopng versions up to 6.6, enabling session hijacking through predictable session identifiers generated with weak time-seeded pseudo-randomness in `src/HTTPserver.cpp`, allowing attackers to gain unauthorized access to legitimate user sessions.

exploited ntopng through 6.6 session-hijacking vulnerability ntopng network-monitoring
1c