Login Request a demo
NT
Product
ntopng
by ntop · last CVE Sep 21, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 1High 10Medium 3Low 0
Severity
All severities17Critical1High10Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ntopng to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-84990
8.8
0%
Sep 21
ntopng: Missing Authorization on System Configuration Backup Download and Listing
Affected: < 6.7.260718
CVE-2026-82412
8.8
1%
Sep 21
ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API
Affected: < 6.7.260717
CVE-2017-5473
8.8
4%
Jan 14
Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authentication of arbitrary users, as demonstrated by…
Affected: through 2.4
CVE-2026-83621
8.1
1%
Sep 21
ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs
Affected: < 6.7.260717
CVE-2018-12520
8.1
11%
Jul 5
An issue was discovered in ntopng 3.4 before 3.4.180617
Affected: 3.4 before 3.4.180617
CVE-2017-7458
7.5
2%
Jun 26
The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application…
Affected: through 2.4
CVE-2017-7459
7.5
1%
Jun 26
ntopng before 3.0 allows HTTP Response Splitting
Affected: through 2.4
CVE-2026-86091
7.1
1%
Sep 4
ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler
Affected: before 6.7.260717
CVE-2026-86090
7.1
0%
Sep 4
ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers
Affected: before 6.7.260717
CVE-2026-84989
7.1
0%
Sep 3
ntopng's Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary Tags
Affected: >= 6.7.0, < 6.7.260718
Showing 10