What’s Vulnerable › Products

ntopng vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your ntopng version is affected

Latest ntopng vulnerabilities

• CVE-2026-84990 — ntopng: Missing Authorization on System Configuration Backup Download and Listing (CVSS 8.8)
• CVE-2026-83621 — ntopng: Missing Authorization Check in REST API Allows Non-Admin Users to Tamper Threat Intelligence Blacklist URLs (CVSS 8.1)
• CVE-2026-82412 — ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API (CVSS 8.8)
• CVE-2026-86091 — ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler (CVSS 7.1)
• CVE-2026-86090 — ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers (CVSS 7.1)
• CVE-2026-84989 — ntopng's Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary Tags (CVSS 7.1)
• CVE-2026-38968 — (CVSS 9.8)
• CVE-2026-45448 — ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') (CVSS 4.3)
• CVE-2024-53426 — (CVSS 6.2)
• CVE-2018-12520 — (CVSS 8.1)
• CVE-2017-7458 — (CVSS 7.5)
• CVE-2017-7459 — (CVSS 7.5)
• CVE-2017-7416 — (CVSS 6.1)
• CVE-2017-5473 — (CVSS 8.8)
• CVE-2015-8368 — (CVSS 6.0)
• CVE-2014-5464 — (CVSS 4.3)
• CVE-2014-4329 — (CVSS 4.3)