Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-97371— ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets

Quick assessment

Affected
ntop ntopng
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

ntopng 是一款基于 Web 的网络流量监控应用。在 6.7.260721 版本之前， 函数在数据包解析和主机初始化过程中，会通过指针将一个四字节的 nDPI 协议类别值写入到 中 函数的两字节 变量。受监控网络段上的远程未认证攻击者可发送匹配自定义类别规则的恶意数据包，从而引发栈内存破坏并导致拒绝服务攻击，且无需用户交互。该问题已在 6.7.260721 版本中修复。

CVSS 5.3 · Medium

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-97371

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets
Source: CVE Program / CVE List V5
Vulnerability Description
ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpi_get_custom_category_match writes a four-byte nDPI protocol-category value through a pointer to the two-byte id variable in IpAddress::reloadBlacklist in src/IpAddress.cpp during packet dissection and host initialization. A remote unauthenticated attacker on a monitored network segment can send packets that match custom-category rules, causing stack corruption and denial of service without user interaction. This issue is fixed in version 6.7.260721.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
ntop ntopng < 6.7.260721 -

II. Public POCs for CVE-2026-97371

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-97371

请登录查看更多情报信息。

Other References for CVE-2026-97371 (2)

IV. Related Vulnerabilities

Same product: ntopng
Same vendor: ntop
Same weakness: CWE-121