Security: ntop/ntopng
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
OS command injection in vulnerability scan exec_netscan via host parameter (incomplete fix bypass)GHSA-p4gm-6qx7-gq3m published
Aug 3, 2026 by cardiglianoModerate -
Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packetsGHSA-26jm-9qfw-89w7 published
Jul 21, 2026 by cardiglianoModerate -
Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary TagsGHSA-43p9-5758-wwq8 published
Jul 17, 2026 by cardiglianoHigh -
Missing Authorization on System Configuration Backup Download and ListingGHSA-7gqc-vjwr-6rh5 published
Jul 17, 2026 by cardiglianoHigh -
Remote Code Execution via OS Command Injection in Vulnerability-Scan REST APIGHSA-2c6p-4pfj-qv58 published
Jul 16, 2026 by cardiglianoHigh -
Authenticated (Non-Admin) Users Can Run Vulnerability-ScanGHSA-9xj6-f266-r46p published
Jul 16, 2026 by cardiglianoHigh -
Missing Authorization in REST API Allows Non-Admin Users to Delete All Notification Endpoints, Recipients, and Host PoolsGHSA-m22w-f647-vx88 published
Jul 16, 2026 by cardiglianoHigh -
Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLsGHSA-ffg5-889g-f5q8 published
Jul 16, 2026 by cardiglianoHigh